How does SourceHire handle data my ATS pushes via the API?
API ingest is treated like an attested CSV import: batch-tracked, provenance-audited, never overwrites candidate-provided data.
Candidate records pushed through the Partner API (/api/partner/v1/candidates) follow the same rules as a recruiter CSV import.
Every API call creates an import batch with your account recorded as the importer — you attest a lawful basis for processing the submitted records, exactly like ticking the attestation boxes on a CSV upload. Re-pushing an existing email never overwrites data the candidate provided themselves; it only enriches empty fields and attaches the new batch for auditability.
API keys are managed in the Integration Studio (/admin/integrations/studio), stored only as SHA-256 hashes, and revocable instantly. Full reference: /developers.