GoodTime

GoodTime takes authenticated action in systems it does not own, across four named ecosystem classes, with eight ATS integrations on dedicated pages in the primary navigation: applicant tracking (Workday, Greenhouse, Lever, Ashby, iCIMS, Jobvite, SmartRecruiters, SAP SuccessFactors), calendar (Office 365 and Google), video conferencing, and messaging (email, SMS, WhatsApp, Slack, Microsoft Teams).

The calendar case is documented down to the scope: GoodTime uses the Office 365 Graph API to read and write interviewer calendars, with write limited to events GoodTime itself created, under an admin consent token plus an end user authorization token.

Beyond that it runs deep two way ATS sync, advances candidates through stages, writes scorecard PDF exports into Workday, and sends candidate and interviewer communication through Slack, Teams, SMS and WhatsApp. Those are writes into outside systems, not reads or handoffs to a person. The pricing page states that all integrations, including deep two way ATS sync, are included rather than sold as an add-on.

Sourcegoodtime.io/integrations, support.goodtime.io Office 365 integration guide and goodtime.io/pricing/hireread 2026-09-08

Cori takes ownership of scheduling, screening, communication and workflow execution end to end: screening and prioritizing candidates, scheduling and rescheduling interviews, coordinating interviewers and availability, conversing with candidates in real time, sending updates and reminders, managing workflows and advancing candidates through stages, and surfacing insights to fix bottlenecks. She acts without prompts and proactively detects conflicts.

The participants are distinct and the vendor names them: recruiters, hiring managers, interviewers and candidates, each with a different job in the sequence, plus the ATS, calendar and video systems the work runs through.

This is coordination between parties, not one agent taking many steps in a single surface; multi day panels across time zones with interviewer replacement mid flight require it.

Workflow Automation, a separately paged feature described as configurable automation for every workflow, makes the sequence the customer's to define, and Cori escalates when something falls outside those defined workflows, which shows the boundary is a real configured object.

Sourcegoodtime.io/products/hire/cori and /products/hire/recruiting-automationread 2026-09-08

GoodTime grounds Cori in a persistent corpus of the customer's own recruiting data: candidate profiles, job and interview plan details, interviewer records, availability, qualifications, training paths, tags and historical recruiting activity, kept current by continuous two way ATS and calendar synchronization rather than assembled per job. Profiles are AI summarized and feedback is consolidated. The corpus stands between runs and scales across an entire hiring organization far past any context window.

It stays queryable. The July 2026 release ships Ask Cori about GoodTime, letting a user ask in plain English about interviews, interviewers, tags, scheduling or recruiting activity, and GoodTime MCP exposes the same corpus to external assistants for natural language query.

Sourcegoodtime.io/blog/product-updates July 2026 and goodtime.io/products/hire/coriread 2026-09-08

A configured boundary with automatic escalation, plus override, is documented, but no review and approve gate over Cori's ordinary actions. When a decision needs input or something falls outside the customer's defined workflows, Cori brings the team in, so the workflow definition is the edge and crossing it routes to a person rather than proceeding.

Every action is visible and the team can step in, adjust or override at any time, and the July 2026 natural language surface states that Cori plans the work, validates every action, and keeps you in control before anything is sent. Personally identifiable information is stripped before AI processing.

Cori's normal path is still to act and then surface what it did. The validation before anything is sent is stated for the natural language command surface specifically, not for work the agent starts itself, and escalation happens on exceptions rather than as a gate on every action.

Sourcegoodtime.io/products/hire/cori and blog/product-updates July 2026read 2026-09-08

GoodTime documents both a compliance posture and a customer administered access surface. Attestations name certificates, reports and dates: SOC 2 Type II (ISAE-3000), SOC 3, ISO 42001, HIPAA/HITECH Type 1, GDPR, CCPA and Data Privacy Framework, with an NYC Local Law 144 badge.

The ISO 42001 certificate is viewable, dated penetration test certificates for GoodTime Hire, GoodTime Meet and the GoodTime API are published as first party PDFs on goodtime.io/certificates, and a Conveyor trust center carries the SOC 2 Type II report, HIPAA/HITECH Type 1 report, CAIQ Full, CAIQ Lite and SIG Lite under NDA.

The access half lives in the admin documentation: SAML 2.0 single sign on with a Super Admin SSO settings page, compatibility confirmed with Okta, OneLogin and Azure and the protocol open to any IdP; identity provider deprovisioning propagates, so an account disabled at the domain level is disabled in GoodTime; and a four level permission model (Super Admin, Admin, Member, No Permission) is set per user under Settings, Team, Permission.

Least privilege is enforced on the calendar integration, where the Office 365 Graph scope writes only to events GoodTime itself created. Supporting controls include encryption at rest and in transit including backups, logical data separation, 72 hour breach notification with an incident report on request, defined and tested RTO and RPO, and 30 day data export on contract expiry.

Sourcegoodtime.io/security and support.goodtime.io SAML/SSO and User Permission Levels articlesread 2026-09-08

Each action is recorded with its reasoning attached. On the agent's own page, every action Cori takes is surfaced clearly, so the team always knows what is happening and why, and the FAQ repeats it: every action is visible, and the team can step in, adjust or override at any time. That is a record of what the agent did, not an explanation of a score: GoodTime documents the action surface itself, with actions, rationale and override. The inputs and assumptions behind each action, and whether a person accepted or changed it, are not documented.

Hiring analytics, dashboards and bottleneck detection give visibility into the customer's hiring process rather than a record of the agent.

Sourcegoodtime.io/products/hire/coriread 2026-09-08

Cori adapts, but no memory store is documented. The agent page says Cori learns how your team hires and gets better over time, adapting to the team's preferences, priorities and workflows and learning from every interaction to constantly improve. That is learning absorbed into the product: there is no object holding taught criteria, no memory scope or stated lifetime, and no retention or deletion control over what Cori has learned as distinct from customer data.

Candidate and interview state kept continuously synced with the ATS is the application's own data model: deleting it deletes the interview record itself, which is what separates a data model from a memory layer.

Sourcegoodtime.io/products/hire/coriread 2026-09-08

An EU hosting option is offered. Under its own heading, "EU-Based Data Hosting Options", the security page states that GoodTime offers customers the option to have their data stored and processed on servers in the European Union.

The option is asserted in prose only: no region list, named customer environment or way to select a region is published, and no page says how a customer elects EU hosting, whether as a contract term, a tier or a provisioning choice. The infrastructure is disclosed: GoodTime is hosted on Heroku and AWS, with the providers' physical data center and environmental controls, logically separated data and encrypted backups, and defined and tested RTO and RPO.

Sourcegoodtime.io/securityread 2026-09-08

A product line is published, but not a set of adoptable agents. Nine features have their own pages: interview scheduling, applicant screening, workflow automation, SMS and WhatsApp messaging, candidate experience, interviewer experience, interviewer training, interview intelligence, and dashboards and analytics. They sit alongside nine industry solution pages and three use case pages.

Cori is not a selectable unit, and the vendor says so: in GoodTime's own words, Cori is not a separate product or add-on but the intelligence running across GoodTime, powering screening, scheduling, coordination and communication end to end. There is one agent and it is the platform, so it cannot be adopted, declined or chosen among.

The nine features are a product line for a single engine rather than complete working agents a buyer selects among, and the industry pages are positioning. No browsable catalog, template library or named agent set appears on the product pages or in the site navigation. The 2025 Orchestra launch framed a digital workforce of multiple hiring agents; the current site has collapsed that into one.

Sourcegoodtime.io/products/hire/cori, /products/hire and site navigationread 2026-09-08

Cori is event driven by construction: she does not wait for prompts, noticing what needs to happen and acting, proactively detecting conflicts and knowing when coordination is needed.

She fires on inbound application flow, hiring stage changes, interviewer cancellations and availability shifts, screening and advancing candidates, scheduling and rescheduling, following up and triggering workflows automatically.

Workflow Automation, a named product feature described as configurable automation for every workflow, lets the customer configure the rules rather than receive a fixed set, and the inbound side is a live two way sync rather than a manual import.

Channel coverage is broad: email, SMS and WhatsApp, Slack, Microsoft Teams, in platform chat, a branded candidate portal with self scheduling, and voice. In the vendor's own line, a user can "message her in Slack, send a quick text, chat in-platform, or simply use your voice" to reach Cori.

Sourcegoodtime.io/products/hire/cori and /products/hire/recruiting-automationread 2026-09-08

No model choice is offered and no model provider is named for Cori. Neither the agent page, the security page nor the July 2026 release shows a model picker or admin model setting, a provider list or routing description, or a way to bring your own model.

GoodTime MCP lets customers connect Claude, ChatGPT and other MCP compatible assistants to GoodTime data. That is the customer choosing which assistant reads GoodTime, and it says nothing about which model runs Cori. The subprocessor list and the disclosed Heroku and AWS hosting are infrastructure, not a model. The vendor's published AI Principles page may name a provider.

Sourcegoodtime.io/products/hire/cori and /securityread 2026-09-08

Two first party signs of an extension surface are published, but no documentation for it. GoodTime MCP, announced in the July 2026 product release, connects AI assistants including Claude, ChatGPT and other MCP compatible tools directly to GoodTime data, so interviews, interviewers, tags and more can be queried in natural language, with an outside assistant driving GoodTime. A dated GoodTime API penetration test certificate is also published as a first party PDF on the security page, alongside the Hire and Meet certificates, which shows a GoodTime API exists and has been tested.

The API is attested without being documented. No developer portal, API reference or SDK appears on the product or security pages or in the site footer, and the customer support center carries integration guides for Office 365, Okta and OneLogin but no API documentation. The MCP is published under a "Sneak Peek" heading, with the section's body still carrying an unfilled placeholder ("brief stat or social proof of the impact of this product release"), so its availability is unclear rather than absent.

Sourcegoodtime.io/blog/product-updates July 2026, goodtime.io/security and support.goodtime.ioread 2026-09-08

A fairness evaluation runs against the customer's own deployment. The Bias Audit Report, a feature of the paid platform, lets a customer verify and continuously monitor that AI Candidate Match performs fairly across demographic groups including ethnicity, gender and other protected characteristics.

The July 2026 release added reporting by country so fairness can be analyzed within each region, with the demographic profiles associated with the customer's results viewable. The customer invokes and reads it rather than requesting it as an engagement, it measures the agent's own matching decisions on the customer's own data, and results are comparable across groups and countries.

The NYC Local Law 144 badge, powered by Asenion, on the security page is a compliance disclosure about GoodTime's product in general, not a test of the customer's deployment. Bottleneck detection and interviewer load optimization are live metrics on hiring operations. No sandbox before deployment, holdout or scored test case is documented for the scheduling and coordination logic, and because pricing is contact only, the tier that includes the Bias Audit Report is not published.

Sourcegoodtime.io/blog/product-updates July 2026read 2026-09-08

No browser or computer use is documented. The agent page, the integrations page and the July 2026 release describe no hosted or local browser, desktop session, or remote or local computer control.

On a scheduling agent the closest feature can read like computer use: Cori operates interviewer calendars, books and moves meetings, and writes into the ATS and video conferencing. The Office 365 integration guide shows the mechanism, the Microsoft Graph API under an admin consent token with write scoped to events GoodTime created, which is a programmatic interface, not an agent driving a screen. Voice is a communication channel. How often it breaks when UI elements change, or whether control runs native, sandboxed or in a VM, does not arise for a Graph API scope.

Sourcegoodtime.io/products/hire/cori, /integrations and support.goodtime.io Office 365 guideread 2026-09-08