Candidate Privacy
Statement

Effective date: October 6, 2025

Elastic N.V. and its subsidiaries and affiliated companies ("Elastic," "we," "us," and "our") are committed to protecting your privacy. This Candidate Privacy Statement ("Statement") describes the privacy practices that apply to our collection and processing of information that identifies or could be identifiable to you ("personal data" or "personal information") when you engage with us for employment or internship opportunities, via any method, or that we collect from public or third-party sources for recruiting purposes (collectively, the "Sites"), as well as how we process that personal data.

EEA, United Kingdom, or California residents

If you are located in the European Economic Area ("EEA"), United Kingdom ("UK"), or Switzerland, please also refer to "Your privacy rights" below for additional information.

If you are a California resident, please read the California Privacy Rights Statement in addition to this Statement, which outlines your rights in California and provides an explanation of how Elastic "discloses" for "business purposes" but does not "sell" or "share" your "personal information."

Personal data we collect and sources
How we use your personal data
How we disclose personal data
Legal bases for processing your personal data
Your privacy rights
International transfers of your personal data
Security
Our retention of your personal data
Changes to this Statement
How to contact us


Personal data we collect and sources

We collect personal data that you provide directly to us, such as when you submit a job application on our Careers page, sign up to receive emails, participate in surveys, in connection with recruiting events, or when we conduct interviews. We may also receive personal data about you from other sources, such as from referrals and references, in connection with background or employment checks, and from third-party sources like recruiting firms, data brokers, or if allowed by applicable law, from other sources such as Sites. Sites include, without limitation, social media sites or platforms you have joined where you have created a public page or profile or otherwise given permission so that recruiters can access and use your information. They also can include vendor sites where Elastic has invited you to participate in assessments, evaluations, or online interviews. We may also automatically gather personal data from Elastic's Sites. For more details about the personal data we collect through our Sites, please see our Cookie Statement.

Elastic may process the following categories of personal data for our recruitment activities:

  • Identifiers such as name, email address, and contact details
  • Educational background
  • Employment background
  • Job qualifications and work eligibility, including to the extent relevant and permitted by applicable law your nationality, country of residence, and visa and immigration status
  • Jobs in which you have expressed an interest or for which you would like to submit an application
  • CV, resume, or transcripts and any supporting documentation attached to your resume such as copies of certificates and diplomas
  • Employment references
  • Compensation details, such as salary information, depending on your region
  • Background check information, such as a verification of your educational and professional background, and other relevant information where permitted and subject to Elastic policies and applicable laws
  • Information about your competency, qualifications, ability, and suitability for a position
  • Information gathered during interviews, including through duly allowed recordings and transcriptions of interviews
  • Data from surveys conducted by Elastic or by third parties on behalf of Elastic
  • Publicly available information, such as social media or other online resources where your information is made publicly available (If we collect your personal data from a third-party source, we will inform you of the identity of the source in our first communication to you.)
  • Certain types of sensitive personal data, to the extent necessary and permitted by applicable law (Some personal data may be considered sensitive personal data under certain privacy laws and includes, for example, government-issued identification number, demographic information relating to a person's race or ethnic origin, physical or mental health or condition, information about special needs or health conditions, information relating to accommodations that you may request during the recruiting process, and any information you voluntarily disclose, if any at all, about political opinions, religious beliefs, sexual orientation, or trade union membership. Subject to locally applicable laws, such data may include information about criminal offenses or convictions, as well as any other information deemed sensitive under applicable data protection laws.) Elastic does not request sensitive personal data in connection with recruiting unless required by local law (for example, for equal opportunity reporting or for compliance with regulations on fairness and anti-discrimination). Where required by applicable data protection or privacy law, we will obtain your consent to the processing of your sensitive personal data.


How we use your personal data

We may use your personal data (as set out above) in our recruitment activities for purposes including:

  • Assessing your qualifications, skills, and interests against our career opportunities, including through machine assisted skills matching
  • Verifying the information you or others provide and carrying out reference checks or conducting background checks (where applicable)
  • Facilitating the recruiting and interview process, including with machine-generated interview summaries and analytics
  • Preventing fraud during the recruiting and interview process with the assistance of such state-of-the-art automated detection as permitted by applicable law
  • Preparing an offer letter, if your application is successful
  • Managing and improving our recruiting processes
  • Generating aggregated and statistical data to produce management reports containing analysis related to recruiting metrics, such as length of the recruiting process
  • Complying with applicable laws, regulations, legal processes, or enforceable governmental requests
  • Proactively researching your educational and professional background and skills and contacting you if we think you would be suitable for a role with us
  • Where we have identified you as a potential candidate from information that we've collected from public sources, suggesting suitable opportunities for you at Elastic
  • For any additional purpose to which you may consent

We may also use your personal data to protect the rights and property of Elastic, our users, candidates, employees, or the public as required or permitted by law.

If you are offered and accept employment with Elastic, the information collected during the recruitment process will become part of your employment record.


How we disclose your personal data

We take care to limit access to your personal data to only those who need access to perform their tasks and duties and to third parties who have a legitimate purpose for accessing it. We may share personal data about you with third parties pursuant to appropriate contractual terms in the following circumstances:

  • Our subsidiaries and affiliated companies, in relation to the purposes described above
  • Vendors, consultants, and other service providers: We may share your personal data internally and with service providers, agents, and other third parties (for example, recruiters, consultants, vendors facilitating interviews, reporting and analytics service providers, attorneys, and pre-employment screening services as necessary in connection with recruiting, employment, corporate governance, acquisitions, and legal or regulatory requirements). We require these third parties to protect the information they receive with appropriate security measures and prohibit them from using the information for their own purposes or outside what is necessary to provide their services.
  • Compliance with applicable law, including compelling orders from a competent law enforcement body, regulatory body, government agency, court, or other public authority, as well as defense of our rights: We may disclose your personal data where we believe disclosure is necessary or required by law or regulation; to comply with legal process or government requests (including in response to public authorities to meet equal opportunity laws, national security or law enforcement requirements); or to exercise, establish, or defend our legal rights.
  • Business transfers: We may share or transfer your personal data in connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, dissolution, corporate reorganization, or similar event. We will inform any buyer that your personal data shall only be used in accordance with this Statement.
  • With your consent: We may disclose your personal data for any additional purpose to which you may consent.


Legal bases for processing your personal data

In line with the laws applicable in the countries where we operate, our legal bases for processing your personal data in the ways described in this Statement will include:

  • The necessity to prepare and enter into an employment contract with you
  • Your specific consent(s), each of which you may revoke at any time
  • Compliance with our legal obligations
  • The protection of your vital interests or those of others
  • The pursuit of our (or others') legitimate interests, including our interests in considering candidates for current and future employment opportunities, in managing and improving our recruitment and hiring processes, in securing our network and information systems, in preventing and deterring fraud in our recruitment and hiring processes, and in administering our compliance with laws and regulations of other jurisdictions than your own, unless those interests are overridden by your interests or fundamental rights and freedoms, which require protection of personal data

Special categories of personal data: Information such as health information is subject to special protections under the laws applicable in the countries where we operate. We may process such data where necessary to carry out our obligations or for the establishment, exercise, or defense of a legal claim by us, or with your explicit consent, or for exercising our rights or your rights in the context of employment or social security law. For example, we may need to process information about your health to accommodate any special needs you have when you come on site for an interview.


Your privacy rights

Depending on where you live, you may have certain rights including the rights to access, correct, delete, and export your personal data and to object to or request that we restrict the processing of your personal data.

To exercise your rights, you may raise a request by submitting this form. Please identify yourself and specify your request. We will respond to your request(s) as soon as reasonably practicable, consistent with our obligations applicable law. Where legally permitted, we may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, or jeopardize the privacy of others.

You may also have the right to lodge a complaint to a data protection authority in the country where you are located. View contact information for data protection authorities in the EEA, the UK, and Switzerland.


International transfers of your personal data

Elastic operates globally, which means your personal data may be stored and processed outside of the country or region where it was originally collected. We protect your personal data in accordance with this Statement wherever it is processed and adduce contractual or other appropriate safeguards to protect it in accordance with applicable laws, including with our service providers, partners, and affiliates. These safeguards include implementing the European Commission's standard contractual clauses along with supplementary measures, implementing the Information Commissioner's Office international data transfer addendum to the European Commission's standard contractual clauses, and relying on the European Commission's and the Information Commissioner's Office's adequacy decisions about certain countries, as applicable, for transfers of your personal data from the UK, EEA, or Switzerland to the United States and other countries. We have implemented similar and no less protective appropriate safeguards in jurisdictions outside the UK, EEA, and Switzerland to the extent required under applicable laws.


Security

We protect your personal data through appropriate technical and organizational security measures. These measures help to minimize risk associated with unauthorized access or disclosure, data loss, or alterations.


Our retention of your personal data

We retain your personal data for as long as required to comply with our legal obligations, to resolve disputes, and to enforce our contractual agreements, or as necessary for our legitimate interests, such as to consider you for other current and future employment opportunities at Elastic.

If you are successful in your application for a position at Elastic, we retain the information that you provide during the application process, and information about your application process, as part of your employee records.

If you do not want us to retain your personal data for consideration for other roles for up to three years from collection, please submit your request through our form. Please note, however, that we may retain some information if required by law or as necessary to protect ourselves from legal claims.


Changes to this Statement

Elastic will review and update this Statement periodically in response to changing legal, technical, and business developments. When we update this Statement, we will note the date of its most recent revision above. If we make material changes to this Statement, we may take appropriate measures to inform you in a manner that is consistent with the significance of the changes we make. We encourage you to review this Statement frequently for information on how Elastic is processing your personal data.


How to contact us

If you have any questions or concerns regarding this Statement, you may submit your request through our form, or send your request by postal mail to:

Elasticsearch N.V.
Attn: Privacy Team
Keizersgracht 281
1016 ED Amsterdam
The Netherlands

Local Data Protection Officers: Elastic has appointed an external Data Protection Officer for German data subjects and has designated internal Data Protection Officers (or equivalent) among our global privacy staff for other locations as required in Brazil, Mexico, Quebec, Singapore, and South Africa. You may contact your local Data Protection Officer through this webform.

If we are unable to resolve your concerns, you have the right to contact your local data privacy supervisory authority or seek a remedy through the courts if you believe your requests to exercise your rights have not been honored.