profile.json

{
  "decision_card_profile_version": "0.3",
  "profile_id": "candidate-data-vault-contract-v0.1",
  "title": "Candidate Data Vault Contract Profile (HR Tech)",
  "purpose": "Profile of the AI Procurement Decision Card v0.3 vault-contract surface, scoped to candidate + employee + contingent-worker data categories. Names what tokenized / redacted / pseudonymized / cleartext access an AI employment tool (AEDT) may have to which HR-data category, under which consent_basis, with what retention envelope, and aligned to EEOC + ADA + NYC LL 144 + IL 820 ILCS 42 + MD HB 1202 + OFCCP expectations.",
  "applies_to": [
    "private-employer",
    "public-employer",
    "federal-contractor",
    "employment-agency",
    "staffing-agency",
    "platform-employer",
    "ai-vendor",
    "bias-auditor"
  ],
  "data_category_taxonomy": [
    {"code": "candidate-identity-core",           "description": "Name, email, phone, address, DOB",                                                                "default_protection_level": "tokenized-or-pseudonymized"},
    {"code": "resume-cv-content",                  "description": "Free-text resume content (work history, education, skills, projects)",                            "default_protection_level": "pseudonymized"},
    {"code": "cover-letter-content",               "description": "Free-text cover letter",                                                                          "default_protection_level": "pseudonymized"},
    {"code": "application-form-responses",          "description": "Structured application form (Workday/Greenhouse) field responses",                               "default_protection_level": "tokenized"},
    {"code": "video-interview-recording",           "description": "Recorded video interview content",                                                                "default_protection_level": "tokenized-with-transcript-cleartext"},
    {"code": "video-interview-transcript",          "description": "Text transcript of video interview",                                                              "default_protection_level": "pseudonymized"},
    {"code": "voice-recording",                     "description": "Audio-only recording (telephone interview, voice assessment)",                                    "default_protection_level": "tokenized-with-transcript-cleartext"},
    {"code": "video-interview-biometric-features",   "description": "Facial-expression / voice-tone / gesture features derived from video — MD HB 1202 implicating",  "default_protection_level": "tokenized-and-not-as-model-input-by-default", "notes": "Default: NOT a model input. MD HB 1202 prohibits facial-recognition use during pre-employment interview without explicit candidate written consent + waiver."},
    {"code": "assessment-test-result",              "description": "Skills assessment, cognitive test, personality test result",                                       "default_protection_level": "tokenized"},
    {"code": "background-check-report",              "description": "FCRA-regulated background check result (criminal, education, employment history verification)",   "default_protection_level": "tokenized-with-summary-stats-cleartext"},
    {"code": "credit-check-report",                  "description": "FCRA-regulated credit-check report — state-restricted in many jurisdictions for employment use",   "default_protection_level": "tokenized-and-not-as-model-input-by-default", "notes": "Default: NOT a model input. Many states restrict employer use entirely (CA, CO, CT, HI, IL, MD, NV, NJ, OR, VT, WA + NYC + Philadelphia + Chicago + DC) for non-financial-services positions."},
    {"code": "social-media-scrape",                  "description": "Data scraped from candidate public social media",                                                  "default_protection_level": "tokenized-and-not-as-model-input-by-default", "notes": "Default: NOT a model input. State-specific (CA, IL, MD, MI, etc.) prohibit employer demands for social media access."},
    {"code": "reference-check-summary",              "description": "Reference call summary"   ,                                                                       "default_protection_level": "pseudonymized"},
    {"code": "performance-review-document",          "description": "Employee performance review (annual / project / 360)",                                            "default_protection_level": "tokenized"},
    {"code": "compensation-history",                 "description": "Salary history — many states prohibit asking for salary history pre-offer",                       "default_protection_level": "tokenized-with-summary-stats-cleartext"},
    {"code": "time-and-attendance-record",           "description": "Time clock / attendance / shift data",                                                            "default_protection_level": "pseudonymized-with-aggregate-cleartext"},
    {"code": "protected-class-self-id-data",         "description": "Race, sex, age, disability, veteran self-identification (OFCCP voluntary forms)",                  "default_protection_level": "tokenized-and-not-as-model-input-by-default", "notes": "Default: NOT a model input. Used only for downstream bias-coverage measurement + OFCCP reporting + EEO-1 reporting. EEOC + OFCCP require segregation from selection process."},
    {"code": "reasonable-accommodation-request",     "description": "ADA reasonable-accommodation request content",                                                    "default_protection_level": "tokenized-and-not-as-model-input-by-default", "notes": "Default: NOT a model input. ADA-protected information per 42 USC §12112(d). Confidential medical record under ADA."},
    {"code": "ada-medical-documentation",             "description": "Medical documentation supporting accommodation request",                                          "default_protection_level": "tokenized-and-not-as-model-input-by-default", "notes": "Confidential ADA medical record. NEVER a model input. Stored only in ADA-restricted vault accessible to ADA coordinator + designated HR roles."}
  ],
  "consent_basis_taxonomy": [
    {"code": "candidate-application-submitted",              "description": "Application submission (express consent to use submitted data for hiring decision)"},
    {"code": "candidate-aedt-notice-acknowledged",            "description": "NYC LL 144 candidate-notice acknowledged + alternative-selection-process declined"},
    {"code": "il-820-ilcs-42-video-interview-consent",        "description": "IL Video Interview Act explicit written consent"},
    {"code": "md-hb-1202-facial-recognition-consent-and-waiver","description": "MD HB 1202 written consent + waiver for facial-recognition use in pre-employment interview"},
    {"code": "employee-employment-agreement-signed",           "description": "Employment agreement signed (express consent to use specified data for employment-decision purposes)"},
    {"code": "ada-accommodation-confidentiality-agreement",    "description": "ADA confidentiality agreement governing accommodation data"},
    {"code": "judicial-order-or-subpoena",                     "description": "Compelled disclosure"}
  ],
  "protection_level_definitions": {
    "cleartext":                                "Raw value reaches the AI tool as-is",
    "tokenized":                                "Stable token replaces raw value; only employer-side vault can detokenize",
    "tokenized-with-transcript-cleartext":      "Recording tokenized but text transcript reaches the AI tool",
    "tokenized-with-summary-stats-cleartext":   "Raw value tokenized but summary statistics (count, recency band, scope band) reach the AI tool",
    "pseudonymized":                            "Identifiers replaced with synthetic equivalents; not reversible by AI tool",
    "pseudonymized-with-aggregate-cleartext":   "Pseudonymized but aggregate features reach the AI tool",
    "tokenized-or-pseudonymized":               "Employer chooses, documented in specific Decision Card",
    "tokenized-and-not-as-model-input-by-default": "Tokenized for storage; default policy = NOT made available as a model input"
  },
  "ada_accommodation_pathway_requirements": [
    "alternative-selection-process-offered",
    "screen-reader-compatible-process-available",
    "extended-time-pathway-documented",
    "human-reviewer-pathway-documented",
    "accommodation-decision-not-bound-to-original-ai-tool-output"
  ],
  "retention_envelope_required_fields": [
    "max_retention_window",
    "deletion_trigger",
    "right-to-be-forgotten-pathway",
    "regulator-record-retention-floor",
    "litigation-hold-trumps-deletion-trigger"
  ],
  "vendor_due_diligence_required_artifacts": [
    "vendor-soc2-type2",
    "vendor-contract-with-audit-rights",
    "vendor-nyc-ll-144-bias-audit-report",
    "vendor-eeoc-ai-guidance-attestation",
    "vendor-data-residency-attestation",
    "vendor-subprocessor-list-with-notice-window",
    "vendor-ada-accessibility-attestation"
  ],
  "audit_stream_emission_conventions": {
    "decision_card_published_event_kind": "candidate_data_vault.decision_card_published",
    "vault_contract_amended_event_kind":  "candidate_data_vault.vault_contract_amended"
  },
  "signature": {
    "required": true,
    "algorithm": "ed25519"
  }
}