Policies
Rubrik Employment Candidate Global Privacy Notice
This Privacy Notice was last modified and is effective as of 25 September, 2026.
This Employment Candidate Global Privacy Notice, together with other notices provided at the time of data collection, (this “Privacy Notice”) describes what personal data Rubrik, Inc., (together with its affiliates and subsidiaries, “Rubrik” or “we”) will collect, how personal data is used by Rubrik, and your rights regarding this personal data when applying for a position with Rubrik or one of our affiliates. The specific entity you are applying to work for is part of a wider group of affiliated companies (the “Rubrik Group”).
California Residents: CALIFORNIA LAW REQUIRES THAT WE PROVIDE YOU A NOTICE ABOUT THE COLLECTION AND USE OF YOUR PERSONAL INFORMATION. IF YOU ARE A RESIDENT OF CALIFORNIA, YOU SHOULD REVIEW THE SECTION BELOW ENTITLED “SUPPLEMENTAL CALIFORNIA DATA PROCESSING NOTICE.” References to “personal information” in this Privacy Notice should be understood to include “personal data” as defined in applicable law.
If you are based in the EU, UK, or Switzerland, please review the SUPPLEMENTAL NOTICE for CANDIDATES in the EU, UK or SWITZERLAND in conjunction with this Privacy Notice.
Once you apply for and are successful in obtaining a role, we may process your personal data for the purpose of entering into an employment relationship with you. If you are engaged by Rubrik as an employee, contingent worker or contractor of Rubrik, see our Global Worker Privacy Notice found on the Cube (Rubrik's intranet) for information about our practices. See our Privacy Policy for information about our practices when you interact with our services in the same manner as a customer or any other individual. See our Cookie Policy for information related to our use of cookies when you visit the Rubrik websites.
This Privacy Notice is not intended and shall not be read to create any express or implied promise or contract for employment, for any benefit, or for specific treatment in specific situations. Nothing in this Privacy Notice should be construed to interfere with Rubrik’s ability to process candidate personal data for purposes of complying with our legal obligations, or for investigating alleged misconduct or violations of company policy or law, subject to compliance with local legal requirements.
What Personal Data Do We Process?
We will collect, use and store candidate personal data which you provide as part of your initial submission or otherwise make available to Rubrik as part of the application process, or that has been collected by a third-party service provider or from a recruiting agency or platform. The type of candidate personal data that we process is generally limited to what we need to engage with you about Rubrik career opportunities, consideration of your application for employment to specific roles, including candidate screening, interview scheduling and management, lawful background screening, and to onboard you if you receive and accept an offer of employment with us. You are not legally required to provide us with any personal data, but without it, we may not be able to process your application. The candidate personal data we process can include, but is not limited to, the following:
Identification information. Your full name, phone number, email address, date and place of birth, mailing address and other similar contact data. You may also provide other contact information such as personal email address(es) and/or cell phone number(s).
Background information. Your education background and work experience, professional qualifications, current salary, CV or resume or public profile, contact details of your former/current employer, criminal records data (used for background screening and vetting purposes where permissible and in accordance with applicable law) and review of other experience(s), writing samples, or other written materials or communications you share with us and recommendations provided on your behalf by others.
Video, voice and image. We may collect video (including photographic and other images), audio, and footage captured on CCTV or other video systems when visiting our office or captured in the course of recruitment events or interviews, where permissible and in accordance with applicable law.
Skill assessment and verification information. If you participate in an online skills assessment or coding test, we or our assessment platform provider may also collect webcam images, screen captures, and screenshots from your assessment session for purposes of proctoring, identity verification, and assessment integrity. Facial detection technology may be used to compare images captured during your assessment to verify identity consistency throughout the session. Where applicable law classifies such data as biometric information, we or our provider will obtain your separate consent before collection.
Identity verification. We may use third-party identity verification service providers to confirm your identity as part of your application. These third-party providers may collect and process your biometric data and will, where applicable law requires, obtain your consent before collection under their own privacy policy. Rubrik does not receive, process or store any biometric data from these third parties.
Demographic information. We may collect some personal data like your date of birth, gender, and sensitive data such as racial or ethnic background, religious or political beliefs, health status, disabilities, sexual orientation, and gender identity. Additionally, we might ask about your parental and military status.
We process this data for several reasons, which can vary depending on local laws. These reasons include:
Complying with legal obligations, such as anti-discrimination laws or government reporting;
Promoting diversity and ensuring equal opportunities; or
Providing work accommodations, health benefits, and managing absences.
If any of this data is not required by law, we will ask for your consent before processing it. You will have the choice to provide this information voluntarily.
Application fraud detection data. When you submit a job application through our careers website or hosted job boards, we or our applicant tracking system provider may collect your IP address, device information (such as user agent and browser metadata), and analyze your email address and phone number metadata (such as domain age, email validity, phone number type, and carrier information) for purposes of detecting potentially fraudulent, impersonated, or spam applications. This data is used to generate fraud risk signals that assist our recruiting and security teams in identifying suspicious applications. Fraud detection data is processed at the point of application submission and is not used to make automated hiring decisions.
Information that we may collect from a third-party. We may collect your data from third-party sources such as recruiters, staffing agencies, employee referrals, recruiting events, or websites that introduce you to Rubrik. This helps us assess your suitability for available roles and streamline the hiring process. Any resumes or candidate information submitted outside our established guidelines (e.g., through our Careers website or email) without a formal agreement will be considered available for Rubrik’s use, and no fee will be paid if the candidate is hired. Additionally, where permitted by law, we may work with third parties to conduct pre-employment background checks. The scope of these checks will vary depending on local legal requirements and is used to ensure the integrity of our hiring process.
If your application progresses, we may also collect and process the following:
Information collected as part of the interview process. The notes taken from your interview, recording of your online interview for review by additional recruiters and hiring managers, and pre-employment tests.
Background check information. Information obtained through the application process, including reference checks, education, prior employment, credit history, criminal records, drug testing or other background screenings, subject to legal permissions, notifications, or restrictions required by applicable law. This background check data may also be used to facilitate pre-employment travel.
Financial information. Your bank account details, tax information, salary, retirement account information, company allowances and other information necessary to administer payroll, taxes, benefits, and equity and incentive compensation.
Data generated by your participation in psychological, technical or behavioral assessments. You will receive more information about the nature of such assessments before your participation in any of them. This may include code submissions, responses to assessment questions, and AI-generated evaluations of your performance, including scores, flagged anomalies, and integrity reports. During proctored assessments, we or our assessment platform provider may also collect behavioral signals such as keystroke patterns, copy/paste activity, tab-switching behavior, browser activity, and screen-sharing or multi-monitor events.
AI-generated recruiting data. We may collect or generate data about you through AI-powered recruiting platforms, including candidate match scores, percentage-based rankings, AI-generated assessments of your qualifications against role criteria, and AI-drafted outreach communications. This data is derived from your professional profile information, resume, work history, education, and skills, and is used to assist recruiters in identifying and evaluating candidates.
Information required to initiate employment. Your proof of eligibility to work in-country of hire (e.g., a passport or visa), your national ID/passport, citizenship status, residency and work permit status, social security number, or other taxpayer/government identification number and other information you provide for the purposes of starting employment or performing an employment contract.
For What Purposes Do We Process Your Personal Data?
We will collect and use personal data you provide or that we collect from other sources as described in this Privacy Notice to process your application for employment, identify and contact you about alternative Rubrik employment opportunities, comply with statutory obligations we have in relation to your application, and for other lawful business purposes, including:
Sourcing candidates, administering and processing your application and employment contract.
We collect and use personal data to source candidates and to determine your suitability for the role you applied for or other roles within the organization. We may use automated tools to help analyze communications and assess interest, but all final decisions are made by a human recruiter. This includes your identification, experience, and any other information you submit to be considered for or to initiate employment. If your application progresses, this includes interview information and to conduct background checks.
- Use of artificial intelligence recruiting platforms for candidate sourcing, application review, and outreach. We may use recruiting platforms that incorporate artificial intelligence, machine learning, or similar technologies to (a) source and identify potential candidates from third-party profile databases and from Rubrik’s internal applicant records based on recruiter-defined criteria, including by generating candidate match scores and rankings; (b) review and rank inbound job applications by scoring candidate resumes and qualifications against role requirements; and (c) generate personalized outreach messaging to candidates based on their profile data and qualifications. These recruiting tools may process your professional profile information, work history, education, skills, and resume content. Personal data such as name and contact details may be redacted before scoring, but professional profile data is used to generate match scores and rankings.
- Use of artificial intelligence and automated tools in the assessment process. We may use third-party assessment platforms that incorporate artificial intelligence, machine learning, or similar technologies ("AI Tools") during candidate skills assessments, coding tests, and interviews. AI Tools may be used to (a) evaluate your technical skills, coding ability, problem-solving ability, and adherence to assessment rules; (b) monitor assessment integrity by analyzing webcam images, screen activity, and behavioral signals to detect anomalies, impersonation, or unauthorized assistance; (c) provide you with AI-powered coding assistance during assessments; and (d) assist interviewers and hiring managers with scoring and evaluation. AI-generated scores, reports and rankings are reviewed by Rubrik personnel, and all final decisions, including hiring and outreach decisions are made by human decision-makers. You may request human review of any AI-assisted evaluation, request an alternative assessment process or reasonable accommodation, request information about how artificial intelligence was used in connection with your candidacy, or request correction of inaccurate information, by contacting us at privacy@rubrik.com.
Conducting other legitimate business purposes. As part of your application, and subject to applicable law, we may conduct background checks, including verification of identity, experience and interview information, other information you submit; and if your application progresses, use of any interview information and background check information. We may collect and use your personal data for HR administration, employee directory maintenance, business operations, security, and compliance purposes. We may also use fraud detection tools integrated into our applicant tracking system to assess application integrity by analyzing IP address reputation, email and phone number metadata, and device signals to identify potentially fraudulent, impersonated, or spam applications; fraud detection results are reviewed by Rubrik personnel and are not used to make automated hiring decisions. Additionally, we may create aggregated, anonymized, or de-identified data for lawful business purposes, such as performing data analytics on our candidate pool.
Compliance with applicable laws and employment-related requirements. We use your data to manage your employment relationship and fulfill obligations under your employment contract. This involves tasks like confirming ability to legally work, onboarding, setting up payroll, benefits administration, tax reporting, and complying with statutory reporting requirements. We also use your data to monitor diversity, promote equal opportunities and comply with legal obligations in relation to the same.
Considering you for future opportunities. If you are not selected for the role you applied for, or if you have previously applied to Rubrik, we may retain and use the personal data collected during your prior application(s), including your resume, scorecard, assessment results, and interview notes, to evaluate your suitability for other current or future roles within Rubrik. We may also use artificial intelligence recruiting platforms to match your prior application data against other open positions. You may opt out of this reuse at any time by contacting us at privacy@rubrik.com.
Why And Who Do We Share Your Personal Data With?
We will only share your personal data with those who have a legitimate business need or otherwise in accordance with your consent. When third-party access is required, we will ensure that personal data is handled in compliance with this Privacy Notice and applicable internal guidelines. Your personal data may be shared with other Rubrik Group companies, third-party service providers and other third-party(ies) necessary for the following legitimate purposes:
Other Rubrik Group companies. Within Rubrik Group companies, only authorized Rubrik personnel will have access to your personal data to carry out the purposes of our personal data processing described above (see section titled “For What Purposes Do We Process Your Personal Data?”) and for the legitimate business purposes described in this Privacy Notice. Rubrik Group companies may disclose human resources and management decisions, and we may transfer your personal data to the hiring entity to make the hiring decision and to other entities within the Rubrik Group to monitor and ensure compliance with applicable policies and procedures and applicable laws.
Third-party service providers. Our service providers may provide services on our behalf. Third-party data recipients include IT hosting or software service providers, recruitment or workforce administration service providers, AI-powered candidate assessment, proctoring, recruiting, candidate sourcing, and application review platform providers and their sub-processors (including providers of AI models used for candidate scoring, ranking, outreach personalization, assessment scoring, integrity monitoring, and identity verification), application fraud detection and risk scoring service providers, financial, benefit, payroll and tax and management service providers, and legal service providers. Where required, third-party service providers will be subject to contractual obligations to implement appropriate technical and organizational measures to safeguard personal data, and to process it only as instructed.
Government officials. To government officials when a legal requirement exists, or to law enforcement agencies or private litigants in response to a valid law enforcement process, such as a warrant, subpoena, or court order.
Regulators and authorities. These parties include courts and other public authorities, independent external advisers and internal compliance and investigation teams to comply with legal obligations, contracts, or respond to data subject rights, government audits, or legal requests.
Legal and professional advice. We may share data with external lawyers, accountants, or consultants for legal advice, compliance, or to defend against litigation.
Business transfer participants. Parties to transactions and potential transactions whereby we sell, transfer or otherwise disclose some or all of our business or assets, including your personal data, such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.
From What Sources Will Rubrik Obtain Your Personal Data?
Rubrik may obtain personal data about you from the following sources:
- From you when you submit resumes or other information online. Any misleading, false or willful omission of relevant information may be sufficient reason to reject your application or for refusal of employment, or suspension or dismissal from employment. Please submit only accurate information. You should inform us promptly of any significant changes to your personal data.
- From other Rubrik affiliates.
- From recruiters and interviews with hiring managers and other Rubrik personnel.
- From previous employers and other referees.
- From your university/college or similar program.
- From social media and internet searches (where allowed by applicable law).
- From professional tests such as coding tests and similar, including artificial intelligence generated scores, integrity and plagiarism reports, proctoring reports (which may include webcam images, screen captures, and behavioral signals), and performance evaluations produced by our assessment platform providers.
- From third-party recruiters, staffing companies, employee referrals, recruiting events, or websites where you are introduced to Rubrik.
- From artificial intelligence powered recruiting platforms that maintain databases of publicly available professional profile information (such as work history, education, skills, and location data), which may support Rubrik to identify and evaluate potential candidates for open positions at Rubrik.
- From fraud detection service providers integrated into our applicant tracking system, which may analyze your IP address, email address, phone number, and device information to generate fraud risk signals.
- From your prior application(s), including any personal data, scorecard, assessment results, interview notes, and other evaluations collected during those prior applications.
- Any resume or other candidate information submitted outside of established candidate submission guidelines (including through the Careers website or via email to any Rubrik employee) and without a written agreement or otherwise will be deemed to be provided for Rubrik’s use, and no fee will be paid should the candidate be hired by Rubrik.
- From background checks that are performed by or on behalf of Rubrik, as legally permissible. The content of background check information varies by country to comply with local requirements.
Where Might My Personal Data Be Transferred?
As a global organization with offices and operations throughout the world, personal data we collect may be transferred or be accessible internationally to other Rubrik entities and affiliates and/or our service providers. Your personal data will be stored and processed using secure systems, including cloud-based and on-premise IT infrastructure operated by Rubrik and/or our service providers. Any such transfers throughout Rubrik’s global business take place in accordance with applicable data privacy laws, Rubrik’s Binding Corporate Rules (“BCR”), the European Commission’s Standard Contractual Clauses (“SCC”) (with our service providers), or such other legally recognized transfer mechanism as may apply.
Our BCR reflect the standards contained in European data privacy laws and means that all our Rubrik entities which have signed up to our BCR have to comply with the same internal rules. For more information about Rubrik BCR or to download a copy see here.
Rubrik complies with the EU-U.S. Data Privacy Framework (“DPF”), the United Kingdom (UK) Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. The DPF is a data transfer framework mechanism for transferring personal data from the European Union, United Kingdom, or Switzerland to the United States. Rubrik has certified to the U.S. Department of Commerce that it adheres to the EU-U.S.DPF Principles, and from the UK Extension to the EU-U.S. DPF, and that it adheres to the Swiss-U.S. DPF Principles, with regard to the processing of personal data received from Switzerland.
Rubrik’s DPF Notice can be found here: DPF Notice. Rubrik’s DPF certification can be accessed here: DPF Certification Search.
Rubrik’s privacy practices, described in this Privacy Notice, comply with the APEC Cross Border Privacy Rules System. The APEC CBPR system provides a framework for organizations to ensure protection of personal data transferred among participating APEC economies. More information about the APEC framework can be found here.www.cbprs.org.
How Long is Your Personal Data Retained?
Rubrik will retain all categories of your personal data no longer than is necessary to carry out the processing purposes described in this Privacy Notice and/or as required by applicable law. The criteria for deciding how long to retain personal data is generally based on whether such a period is sufficient to fulfill the purposes for which the personal data was collected, as described in this Privacy Notice, and as documented in our Rubrik data retention schedule.
We may, subject to different retention requirements under any applicable law, retain your personal data after the recruitment process is complete for a reasonable period of time to evaluate your suitability for and contact you about potential future opportunities.
How Does Rubrik Protect Your Personal Data?
We maintain organizational, physical and technical security arrangements using a variety of security technologies and procedures designed to help protect your personal data from unauthorized access, use or disclosure. We have protocols, controls and relevant policies, procedures and guidance to maintain these arrangements taking into account the risks associated with the categories of personal data and the processing we undertake.
Does this Privacy Notice Address how Third Parties Process my Personal Data?
This Privacy Notice does not address, and we are not responsible for, the practices of any third parties that are not our service providers, or which have their own rules for how they collect and use your personal data. Any links to third-party websites or services are not endorsements.
Access to Personal Data
You may request to access, update, correct or delete personal data by contacting us as below.
Contact Us
If you have questions or comments about how we will use your personal data, please contact privacy@rubrik.com, visit https://www.rubrik.com/legal/privacy-request, or contact the applicable Rubrik Group entity using the details provided in Annex 1 or contact us at:
Rubrik, Inc.
3495 Deer Creek Road
Palo Alto, CA 94304
USA
+1 (844) 478 2745
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
Under Israeli privacy regulations, when processing candidates’ personal data Rubrik is considered a ‘database controller’ regarding the aforementioned personal data, and in that role can be reached by mail at 6 Yitzhak Sadeh St., Building B, 17th Floor, 6777506 Tel-Aviv, or by email at privacy@rubrik.com.
Supplemental California Data Processing Notice
In addition to the information shared in the Privacy Notice, this section applies to residents of California and describes how we collect, use, and disclose their personal information and the rights they may have with respect to their personal information. These rights are not absolute, and in certain cases we may decline your request as permitted by law.
For purposes of this Supplemental California Data Processing Notice, “personal information” and “sensitive personal information” have the meanings given in the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CPRA”).
Your Privacy Rights.
Information. You can request the following information about how we have collected and used your personal information during the past 12 months preceding your request. After confirming a verifiable request, we may disclose to you:
The categories of personal information that we have collected;
The categories of sources from which we collected personal information;
The business or commercial purpose for collecting, selling or sharing personal information;
The categories of third parties with which we disclose personal information;
A copy of the specific pieces of personal information that we have collected about you (also known as a data portability request); and
A list of disclosures that identifies the personal information categories that each category of recipient obtained for a business purpose.
Deletion. You can ask us to delete the personal information that we have collected from you, subject to certain exceptions. Once we receive and confirm your verifiable request, we will delete or de-identify (and direct our service providers to delete or de-identify) your personal information from our records, unless an exception applies.
Correction. You can ask us to correct inaccurate personal information that we have collected about you.
Opt-out of sale or sharing of personal information. California residents can opt-out of any “sale” or “sharing” of personal information as such terms are defined under the CPRA. We do not sell or share personal information subject to this Privacy Notice and have not done so in the preceding 12 months. However, we encourage you to review our Privacy Policy for information about the sale or sharing of personal information that may occur when you interact with us in the same manner that a customer or other non-employee candidate or non-employee may interact with us.
Opt-out of automated decision making and profiling. California law provides consumers with rights related to the use of automated decision-making technology (“ADMT”) that is used to replace or substantially replace human decision-making for significant decisions, including decisions related to employment. Rubrik does not use ADMT to make hiring decisions without human involvement. During the hiring process, we may use artificial intelligence powered assessment tools that generate scores, integrity reports, and performance evaluations based on your assessment submissions, behavioral signals, and proctoring data. We may also use artificial intelligence recruiting platforms that generate candidate match scores, rankings, and personalized outreach based on your professional profile information, resume content, work history, education, and skills. We may also use fraud detection tools integrated into our applicant tracking system that analyze IP address, email, phone, and device data to generate fraud risk signals for incoming applications. These outputs are reviewed by Rubrik personnel, and all final hiring decisions are made by a human decision-maker. If you would like more information about how we use automated decision-making during the hiring process, you can contact us at privacy@rubrik.com.
Limit processing of sensitive personal information. Under the CPRA, you can ask us to limit the processing of any sensitive personal information (“SPI”), as defined under the CPRA. We only process SPI as necessary for the purposes described in this Privacy Notice and as permitted under the CPRA, including, where applicable, the collection of biometric information through facial detection technology used during candidate assessments for identity verification and assessment integrity purposes. Where we collect biometric information, we do so only with your consent and use it solely for the purposes disclosed at the time of collection. You may request that we limit our use of SPI by contacting us at privacy@rubrik.com.
Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the CPRA, including exercising such rights without retaliation.
How to Exercise Your California Privacy Rights.
You may submit requests to exercise your rights under the CPRA through one of the following means:
Submitting a request to: Rubrik | Privacy Request;
Calling us at (+1) 844-478-2745, or
Emailing us at privacy@rubrik.com
We may need to verify your identity in order to process your information/know, access, appeal, correction, or deletion requests and reserve the right to confirm your residency. To verify your identity, we may require email validation, government identification, a declaration under penalty of perjury, or other information, where permitted by law. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. We reserve the right to confirm your current California residency.
Your authorized agent may make a request on your behalf upon our verification of the agent’s identity and our receipt of a copy of a valid power of attorney given to your authorized agent pursuant to California Probate Code Sections 4000-4465. If you have not provided your agent with such a power of attorney, you must provide your agent with written and signed permission to exercise your CPRA rights on your behalf, provide the information we request to verify your identity, and provide us with confirmation that you have given the authorized agent permission to submit the request.
We will not penalize you for exercising any of your rights. If we decline your request, we will explain the basis for the denial. You may appeal our decision by contacting us at privacy@rubrik.com. If your appeal is denied, you may also contact the California Privacy Protection Agency.
California Categories of Personal Information.
California law requires that we describe the categories of personal information we collect by reference to certain categories described in California law. All categories described in the “What Personal Data Do We Process?” section in this Privacy Notice include “identifiers,” “professional or employment information,” and “inferences,” as defined under California law.
Additionally,
Experience information includes “education information”;
Application information includes “education information,” “sensory information,” “medical information,” and “financial information”;
Video system information includes “sensory information” and “internet or network information”;
Information collected as part of the interview process includes “sensory information” or “education information”;
Assessment proctoring data (including webcam images, screen captures, and behavioral signals collected during skills assessments) includes “sensory information,” "internet or other electronic network activity information,” and, where facial detection technology is used, may include “biometric information”;
Artificial intelligence generated assessment outputs (including scores, integrity reports, and performance evaluations) include “inferences”;
Artificial intelligence generated recruiting outputs (including candidate match scores, rankings, and outreach content generated by artificial intelligence recruiting platforms) includes “inferences” and “professional or employment information”;
Application fraud detection data (including IP address, device information, email and phone number metadata, and fraud risk signals) includes "identifiers," "internet or other electronic network activity information," and "inferences";
Background check information includes “education information” and “medical information”;
Recommendations provided on your behalf by others includes “education information”;
Banking information includes “financial information”; and
Information required to initiate employment includes “financial information” and “medical information.”
The sections “From What Sources Will Rubrik Obtain Your Personal Data?,” “For What Purposes Do We Process Your Personal Data?” and “Why and Who Do We Share Your Personal Data With?” above generally describe our practices currently and during the preceding 12 months. You should assume that each category of personal information described herein may be disclosed, and may have been disclosed during the preceding 12 months, to each category of parties listed in the section “Why and Who Do We Share Your Personal Data With?”. This Supplemental California Data Processing Notice provides information about the categories of information that we have collected, the sources of that information, the purposes for which we have used the information, and the categories of third parties to whom we have disclosed the information for business purposes.
Supplemental Notice for Candidates in the European Union, United Kingdom and Switzerland
In addition to the information shared in this Privacy Notice, this Supplemental Notice describes how Candidates in the European Union, United Kingdom and Switzerland (this "Notice") may have certain rights under applicable data protection laws, such as the EU and UK General Data Protection Regulation 2016/679 (collectively, the "GDPR") and local laws implementing or supplementing the GDPR and the Swiss Federal Act on Data Protection.
What Are Our Legal Justifications for the Processing of Your Personal Data?
We use your personal data for the purposes listed below. In respect of each of the purposes for which we use your personal data, the GDPR requires us to ensure that we have a “legal basis” for that use. Our legal bases for processing your personal data described in this Privacy Notice are listed below.
Legitimate Interest. Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests. More detail about the specific legitimate interests pursued in respect of each purpose we use your personal data for is set out in the table below.
Compliance with Laws. Where we need to comply with a legal or regulatory obligation.
Consent. Where we have your specific consent to carry out the processing for the purpose in question.
We have set out below the legal basis we rely on in respect of the relevant purposes for which we use your personal data:
| Purpose | Categories of Personal Data | Legal Basis |
| Administering and processing your application | Any and all data types relevant to the processing | Legitimate Interests We have a legitimate interest in ensuring the efficient administration of the application process |
| Determining your suitability for the role which you have applied for | Any and all data types relevant to the processing | Legitimate Interests We have a legitimate interest in ensuring that we select the best candidate for the role |
| Conducting background checks | Background check information | Legitimate Interests We have a legitimate interest in conducting background checks on prospective employees Where required by applicable law: Consent |
| Complying with applicable laws and employment-related requirements | Any and all data types relevant to the processing | Compliance with Law Legitimate Interests Where Compliance with Law is not applicable, we have a legitimate interest in participating in, supporting, and following legal process and requests, including through cooperation with authorities. We may also have a legitimate interest of ensuring the protection, maintenance, and enforcement of our rights, property, and/or safety |
| Monitoring diversity | Demographic information | Where such processing is required by applicable law: Compliance with Law Where such processing is not required by applicable law: Either: • Consent; or • Legitimate Interests We have a legitimate interest in monitoring the diversity of our workforce and promoting equal opportunities |
| Creating aggregated, anonymized or de-identified data | Any and all data types relevant to the processing | Legitimate Interests We have a legitimate interest in analyzing workforce demographics and trends |
| Retaining prior application data to evaluate candidates for and to notify them of new positions | Identification information, assessment results, interview information and other applicant data from prior applications | Legitimate Interests We have a legitimate interest in retaining your information to advise you of roles that may interest you Where required by applicable law: Consent |
| Artificial intelligence assisted candidate assessment and proctoring, including evaluation of technical skills, assessment integrity monitoring, and plagiarism detection | Assessment submissions, behavioral signals, webcam images, screen captures, AI-generated scores and reports | Legitimate interests We have a legitimate interest in evaluating candidates fairly, maintaining assessment integrity, and detecting unauthorized assistance or impersonation |
| Identity verification using facial detection technology during assessments | Webcam images and facial geometry data | Where such processing involves special categories of personal data: Explicit Consent |
| Artificial intelligence candidate sourcing, application review scoring and ranking, and personalized outreach generation tools | Professional profile data, work history, education, skills, resume content, Artificial intelligence generated match scores and rankings | Legitimate interests We have a legitimate interest in efficiently identifying, evaluating, and engaging candidates using artificial intelligence assisted tools Human decision-makers review all artificial intelligence generated outputs and make all sourcing and final hiring decisions |
| Application fraud detection and spam prevention | IP address, device information, email and phone number metadata, fraud risk signals | Legitimate interests We have a legitimate interest in protecting the integrity of our recruitment process by detecting potentially fraudulent, impersonated, or spam applications |
We may use your personal data for reasons not described in this Privacy Notice where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal data for an unrelated purpose, we will notify you and explain the applicable legal basis.
What Are Your Rights in Respect of Your Personal Data?
The GDPR gives you certain rights regarding your personal data in certain circumstances. If you are located within Europe, you may ask us to take the following actions in relation to your personal data that we hold:
Access. Provide you with information about our processing of your personal data and give you access to your personal data.
Correct. Update or correct inaccuracies in your personal data.
Delete. Delete your personal data.
Transfer. Transfer a machine-readable copy of your personal data to you or a third party of your choice.
Restrict. Restrict the processing of your personal data.
Object. Object to our reliance on our legitimate interests as the basis of our processing of your personal data.
Automated decision-making. Not to be subjected to a decision solely based on automated processing, including profiling.
Opt-out. Stop sending you notifications about jobs that may be relevant to you.
Consent withdrawal. Where we rely on your consent and/or explicit consent to process your personal data you may withdraw that consent at any time.
You may submit these requests by email to privacy@rubrik.com or by visiting https://www.rubrik.com/legal/privacy-request. We may request specific information from you to help us process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your personal data or our response to your requests regarding your personal data, you may contact us or submit a complaint to the data protection regulator in your jurisdiction:
For individuals in the European Economic Area: the contact information for the data protection regulator in your place of residence can be found here: https://www.edpb.europa.eu/about-edpb/our-members_en.
For individuals in the UK: the contact information for the UK data protection regulator can be found here: https://ico.org.uk/make-a-complaint/.
For individuals in Switzerland: the contact information for the Swiss data protection regulator can be found here: https://www.edoeb.admin.ch/en/.
If we are relying on your consent to process your personal data, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before withdrawal of consent.
EU, UK and Switzerland candidates may also direct questions about how we handle personal data to our Data Protection Officer by sending an email to DPO@Rubrik.com.
Where the processing of your personal data falls within the scope of Rubrik's BCR, you may also review your rights under the BCR here.
Annex 1
Contact Us
If you have questions or comments about how we will use your personal data, please contact privacy@rubrik.com, visit www.rubrik.com/legal/privacy-request, or contact us using the following details.
| Legal Name | Country | Registered Address |
| Rubrik Australia Pty Ltd | Australia | Level 19, 181 William Street Melbourne, VIC 3000 Australia (Baker office) |
| Rubrik Cloud Data Management Inc. | Canada (New Brunswick) | 44 Chipman Hill, Suite 1000 Saint John, NB E2L 2A9 (office of Stewart McKelvey law firm) |
| Rubrik France SaS | France | c/o Citco France SARL 162 Boulevard Haussmann 75008 Paris, France |
| Rubrik Germany GmbH | Germany | c/o Citco Deutschland GmbH Marienstraße 15, 60329 Frankfurt am Main Germany |
| Rubrik India Private Limited | India | 7th Floor, Building 9, SEZ CESSNA Business Park, Outer Ring Road, Kadubeesanahalli Village, Varthur Hobli, Bengaluru (Bangalore) Urban, Karnataka, 560087 |
| Rubrik Cloud Data Management Limited | Ireland | Link Road (Ground Floor) Carrigrohane Ballincollig Co. Cork P31 D452 Ireland |
| Rubrik Israel Ltd | Israel | 6 Yitzhak Sadeh St., Building B, 17th Floor, 6777506 Tel-Aviv Israel |
| Rubrik Italy S.r.l. | Italy | c/o BDO Viale Abruzzi 94, 20131 Milano MI Italia |
| Rubrik Japan KK | Japan | Twin City S 3F, Chuo Rise Across Group, 2-14-7 Tamagawa Setagaya-ku, Tokyo, Japan 〒158-0094 (office of Citco's partner "Aoyama Sogo Accounting Firm") |
| Rubrik The Netherlands B.V. Branch | KSA | P.O. Box 69103 Riyadh 11547 (Baker) |
| Rubrik The Netherlands B.V. | Netherlands | Hoogoorddreef 56 F, 1101 BE Amsterdam (Rubrik office) |
| Rubrik the Netherlands B.V. NUF | Norway | Hoogoorddreef 54A, 1101 BE Amsterdam |
| Rubrik Singapore Pte Limited | Singapore | 12 Marina View #11-01 Asia Square Tower 2 Singapore 018961 |
| Rubrik Data Security, S.L. | Spain | Avenida. Concha Espina 39B 28016 Madrid, España (Citco agent) |
| Rubrik Switzerland GmbH | Switzerland | c/o Blum Verwaltungs- und Treuhand AG Löwenstrasse 20 8001 Zürich Switzerland |
| Rubrik Middle East FZ-LLC | UAE | Dubai Internet City Building 10, Units 311, 312 Dubai, United Arab Emirates |
| Rubrik UK Limited | UK | Citco London Limited 7 Albemarle St. Mayfair, London United Kingdom, W1S 4HQ |
| Predibase, LLC | US (Delaware) | 1209 Orange Street Wilmington, DE 19801 |
| Rubrik, Inc. | US (Delaware) | 1209 Orange Street Wilmington, DE 19801 |
| Rubrik International, Inc. | US (Delaware) | 1209 Orange Street Wilmington, DE 19801 |
| Rubrik Cloud Data Management International, LLC | US (Delaware) | 1209 Orange Street Wilmington, DE 19801 |
| Laminar Technologies, Inc. | US (Delaware) | 1209 Orange Street Wilmington, DE 19801 |
Privacy Notice Updates
Rubrik may update this Privacy Notice from time to time to reflect changes to our information practices. When we change the policy in a material way, we will provide you with notice as required by applicable law, including notifying you based on the contact details we have on file and posting an updated version of the Privacy Notice. We encourage you to periodically review this page for the latest information on our privacy practices.