UK HR Hub · Updated Jul 2026

AI tools for UK people teams, mapped to UK GDPR & ERA 1996

A curated stack for HR directors, people ops and talent leaders — covering hiring, onboarding, engagement, policy and analytics. Every tool is assessed for UK/EU data residency, Article 22 exposure and DPA availability.

GDPR ReadyUK Hosting

Where AI fits in a UK-compliant HR workflow

Risk ratings are editorial guidance. Combine with a DPIA and your organisation's employment counsel.

Low risk

Drafting job ads and inclusive JDs

Bias-aware language, readability scoring, faster hiring cycles.

Human review keeps this low-risk. Log tool use in your recruiter runbook to evidence fair-hiring practice.

Medium risk

Interview scheduling and candidate Q&A

Conversational AI that handles logistics and FAQs.

Confirm the vendor stores candidate data in UK/EU regions and offers a UK GDPR-compliant DPA. Provide a human escalation path.

High risk

Automated screening or scoring of candidates

AI-driven CV ranking, video assessment or personality inference.

High risk under UK GDPR Article 22 (automated decisions). Complete a DPIA, keep a human in the loop, and disclose the process in your privacy notice.

The vetted stack

Each tool has been reviewed for UK/EU processing, DPA availability and training opt-out.

Full directory
Procurement checklist

Before you deploy AI in hiring or people ops

  • DPIA completed for automated candidate decisions (Art. 22 UK GDPR)
  • Lawful basis defined for employee monitoring / analytics
  • Vendor DPA executed with UK/EU data residency
  • Training opt-out configured for confidential HR inputs
  • Privacy notice updated to disclose AI use in recruitment
  • Grievance and appeals path preserved for AI-assisted decisions

Frequently asked questions

Can UK employers use AI to screen CVs?

Yes, but automated decisions with legal or similarly significant effects trigger UK GDPR Article 22. You need a lawful basis, a DPIA, meaningful human review and clear disclosure to candidates.

Is it lawful to record interviews with AI note-takers?

You must inform candidates before recording, obtain a clear lawful basis (usually legitimate interests with a balancing test), store recordings in the UK/EU and delete within a defined retention period.

Which AI tools comply with UK GDPR?

Vendors offering signed DPAs, UK/EU processing regions, zero-training on customer data and SOC 2 / ISO 27001 assurance are appropriate. Every tool in our vetted stack is flagged against these criteria.

Editorial guidance from AI Stack UK. Not legal advice. For decisions with employment-law consequences, consult qualified UK employment counsel.