Last reviewed 14 July 2026 · Next scheduled review 11 May 2027
Mentum's legal documents. Each is the authoritative current state. For the broader security and compliance posture, start at the Trust Centre.
UK GDPR Article 28 DPA, including the International Data Transfer Agreement, Standard Contractual Clauses and the Annex III sub-processor list.
OpenThe vendors authorised under Articles 28(2) and 28(4) to process personal data on Mentum's behalf, with hosting region, transfer mechanism and a thirty-day change-notice commitment.
OpenWhat employers and candidates may and may not do on Mentum, anchored to UK regulatory frameworks (Equality Act, Computer Misuse Act, Online Safety Act and others).
OpenHow long each category of personal data is kept, the lawful basis for the period, and the automated cleanup and anonymisation that enforces it.
OpenMentum's commitments under the Equality Act 2010 across the platform, the matching engine and our own operations.
OpenOur position on modern slavery, human trafficking and bribery under the Modern Slavery Act 2015 and the Bribery Act 2010.
OpenAvailability targets, support response windows and incident communication commitments for Mentum customers.
Open