Comeet DSAR Automation Setup

This guide outlines the steps required to enable, test and configure the Comeet Recruiting API so we can automate DSAR erasure.

1. Confirm Plan & Request API Access

  • Ensure your Comeet account is on the Enterprise plan (Recruiting API access is only available there).
  • If you haven’t already, please submit the Recruiting API access request form.
  • Once approved, Comeet support will:
    • Provide your Integration Secret
    • Invite you to a sandbox environment

2. Retrieve Sandbox Credentials

  • In the sandbox account, an Admin/Owner should:
    • Go to Settings → Integrations
    • Copy the Sandbox API Key

For more details, see Getting Started for Customers.

3. Enable Correct Permissions

When activating the integration, please make sure the following permissions are enabled (see full Recruiting API Permissions list):

  • Candidates: Retrieve candidates created by other sources
  • Persons: Delete or Pseudonymize persons
  • (Optional but recommended) Candidates: Include source contact personal details in candidate object

These permissions are necessary for us to:

  • Look up candidates by email (across all sources). This is necessary for us to get the candidate UID, which we then use with the person deletion/pseudonymization endpoints.
  • Delete or pseudonymize person records for DSAR compliance
  • Ensure we can access personal details such as email addresses

4. Share with Us

Please provide the following so we can begin testing:

  • The Sandbox API Key
  • The Integration Secret
  • A test candidate email we can safely use in sandbox for validation

5. Move to Production

Once we complete testing in the sandbox and validate that everything works as expected:

  • Please provide the Production API Key from your live Comeet account
  • We will then enable the production integration

Important Notes

  • Erasure is at the Person level: deleting or pseudonymizing a person will affect all candidate applications linked to that person. See Delete a Person API and Pseudonymize a Person API.
  • Ongoing/scheduled interviews must be cleared: Comeet will block deletion/pseudonymization if a person has interviews in progress.

✅ Once the above is complete, we’ll be able to automate DSAR erasure requests in Comeet end-to-end.

Still need help? Contact Us Contact Us