What should a busy buyer check first?
Start with the work the hire will do. List the personal data they might see, from applicant contact details to customer support tickets. Then identify each person or business that would receive it.
Keep the hiring review separate from the work-access review. A recruiter receiving a résumé and an engineer reading customer records need different permissions. Ask for a written plan for each.
Use this page as a hiring checklist. For questions about browsing this website or submitting an inquiry, request the applicable website privacy notice before sending personal data.
Choose a specific task to walk through with the provider. For a support hire, use a sample ticket with invented customer details. Ask where the ticket would appear and whether the worker could download it. Record which permissions the task needs before anyone creates an account.
What does the data tell you about location and access?
Time zones describe working hours. Use them to plan when your security contact and the hire can speak.
Bogotá stays at UTC-5 without daylight saving time. Buenos Aires stays at UTC-3 without daylight saving time. These facts help schedule a review or incident call; assess privacy through the actual data flow and agreed controls. IANA time zone data
Ask for a diagram that shows where candidate records and work data go. Include the provider's systems, your own systems, and any other parties receiving copies. Request storage locations separately from the worker's location.
For each transfer, record its purpose and the person who approves it. If a proposed tool needs customer records, ask whether a test dataset would meet the same need.
Check the diagram against the proposed contract. If a provider names a payroll processor or background-check service, ask what data that business receives. Request a process for reviewing changes to those arrangements during the engagement.
How should you compare Latin American and other hiring models?
For offshore vs nearshore outsourcing, compare the proposed responsibilities before choosing a location. Use the same questions across bids so you can see who will handle each task.
| Hiring model | Questions to resolve before signing |
|---|---|
| Recruiting agency | Who receives résumés and interview notes? What happens to those records after placement? |
| EOR | Which employment records will it hold? Which parties process those records on its behalf? |
| Managed hiring partner | Who handles recruitment records, employment records, and work-system access? |
| Direct hire | Which internal team will manage records, permissions, and departure checks? |
| Outsourced project team | Who approves each team member's access? Can the delivery team change without your approval? |
Write the agreed duties into the handoff plan. Give each task a named owner, including tasks your company keeps.
Read the Opus hiring-model comparison. This site is an Opus-owned reference; recommendations are editorial.
What should you ask a provider before sharing data?
Send questions tied to the role. A payroll specialist and a developer may need access to very different records.
- Which personal data do you need during selection, and why?
- Who can view interview notes and background-check results?
- Where will records be stored, including backups?
- Which other businesses will receive or process them?
- What retention periods apply, and how do deletion requests work?
- Who approves access to our systems?
- What device and account controls will apply?
- Who contacts us after a suspected incident, through which channel, and within what agreed time?
- What data may enter AI tools or personal accounts?
- Who confirms access removal when the assignment ends?
Ask for answers before sending candidate files or granting production access. Have the person who manages your systems review the proposed setup.
For a development role, start with a test repository and synthetic records where practical. Document any later request for broader access. Include the reason, approver, and date for review.
Walk through a departure before onboarding. Identify who disables the account if the manager is away. Ask how downloaded files and backup copies will be handled, including any records kept under an agreed retention rule. Put the contact details and required steps somewhere the team can reach without the departing worker's help.
What should you confirm with Opus?
Opus states: "The client chooses the finalist and manages day-to-day work."
Use that division of work to ask who will approve accounts and review permissions. Request the privacy notice and proposed data-handling terms that apply to your engagement. Ask how candidate records move into the hiring process and which records remain afterward.
Before the hire starts, agree on the contact for privacy questions and the process for reporting suspected misuse. Keep those details with the onboarding checklist so the manager can find them during the first week.
Read the Opus hiring-model comparison.
<!-- Not saved to disk: the workspace is read-only. Website data practices were not checked; this is a hiring checklist, not a website privacy notice. -->
Questions & answers
What should a nearshore vs offshore privacy review cover?
Map the personal data shared during recruitment and daily work. Ask who receives it, where it is stored, how access is controlled, and what happens when the relationship ends.
What should I check before sharing candidate records?
Ask which records the provider needs, who can view them, and how long copies are kept. Use the agreed transfer channel and avoid sending unrelated personal details.
Does a Latin American location settle the privacy review?
Review the specific provider, contract, and work setup. Ask where the person will work and where each system stores data, including backups.
What should a LatAm hiring agreement say about access?
Ask it to name who approves access, who manages accounts, and who removes permissions after a role change or departure.
Which questions should I ask an EOR about personal data?
Ask which employment records it handles, which other parties receive them, and how it handles retention and deletion requests.
How should I prepare a software development trial?
Use synthetic test data where possible. Specify approved repositories and tools, and require approval before granting access to customer records.
What should I ask about AI tools?
Ask whether candidate records, source code, or customer data may enter AI tools. Agree on approved tools and permitted data before work starts.
What should happen when a hire leaves?
Assign someone to disable accounts, revoke credentials, and confirm equipment return. Ask the provider how it handles retained records and deletion confirmation.
Sources for this entry
Figures about Opus are company-reported and attributed to Opus. Other figures link to their source.
Continue reading
Cite this entry
Nearshore vs Offshore. “nearshore vs offshore privacy.” Opus Research. Last updated . https://nearshorevsoffshore.com/privacy/
- Featured provider
- Opus (disclosed owner of this site)
- Official page
- hireopus.com ↗
- Author
- Opus Research (Opus)
Reviewed by the Opus Research editorial desk ·