Overview
Greenhouse is one of the most widely adopted applicant tracking systems (ATS) in the technology and enterprise recruitment space. The platform is used by thousands of companies to manage their entire hiring pipeline — from job posting and candidate sourcing through interview scheduling, scorecards, and offer management. When embedded on an employer's website, Greenhouse powers the careers page experience, transforming static job listings into interactive application portals.
For website operators, Greenhouse's embedded scripts represent a direct service to job seekers who are actively looking to apply. The data collected through these scripts — resumes, contact information, work history, and screening question responses — is provided voluntarily by candidates as part of a deliberate application process. This positions Greenhouse firmly in the functional category, though the sensitivity of employment application data warrants careful attention to data handling practices.
What This Script Does
Greenhouse's embedded scripts deliver a complete careers site and application experience:
- Job Board Rendering: Fetches and displays current job openings from the employer's Greenhouse account, with filtering by department, location, and job type. The listings are dynamically rendered and stay synchronized with the employer's ATS without manual page updates.
- Application Form Workflows: Renders multi-step application forms that collect candidate information including personal details, resume uploads, cover letters, and custom screening questions. Forms may include conditional logic that shows different questions based on the role or candidate responses.
- Candidate Data Submission: Securely transmits completed applications to Greenhouse's servers, where they enter the employer's hiring pipeline. This includes file uploads (resumes, portfolios) and structured form data.
- Source Tracking: Records how candidates found the job listing (direct link, job board referral, social media) using URL parameters and referrer data. This helps employers understand which recruitment channels are most effective.
- EEOC and Compliance Data Collection: For US-based employers, Greenhouse forms may include optional Equal Employment Opportunity Commission demographic surveys, collecting self-reported race, gender, and veteran status information for compliance reporting.
Consent & Compliance
Greenhouse processes significant personal data — names, email addresses, phone numbers, employment history, and potentially sensitive demographic information. However, this processing has a clear legal basis under GDPR Article 6(1)(b): the candidate is taking pre-contractual steps by applying for employment, and the data collection is necessary to process that application.
The ePrivacy Directive's cookie exemption for strictly necessary functionality applies here as well. Any cookies or session storage used by Greenhouse's embedded forms to maintain application state (form progress, uploaded files) serve the application process that the candidate has explicitly initiated.
Source tracking introduces a minor compliance consideration. While tracking which recruitment channel referred a candidate is a legitimate business interest for the employer, the use of referrer data and URL parameters to attribute application sources constitutes a form of tracking. In practice, this is typically considered proportionate to the legitimate interest in measuring recruitment channel effectiveness.
Employers using Greenhouse should ensure their privacy notice covers employment application data processing, including data retention periods, any automated screening decisions, and the rights of candidates regarding their application data.
Should You Block This Without Consent?
Greenhouse scripts serve a functional purpose directly initiated by job seekers who choose to browse and apply for positions. The data collection is voluntary, transactional, and necessary to process employment applications. No advertising, behavioral profiling, or cross-site tracking occurs through the careers page scripts.
No.
Is Greenhouse GDPR compliant?
Greenhouse typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Greenhouse can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Greenhouse, not on Greenhouse itself.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
greenhouse.comFunctionalgreenhouse.com is a functional domain operated by Greenhouse, used to run site features like chat, video, embeds, and preferences.
Frequently Asked Questions
Related Vendors
Manage consent for Greenhouse
ConsentStack automatically detects and manages Greenhouse trackers so your site stays compliant with global privacy regulations.