Learn how HiPeople is impacting the world’s leading hiring teams in a live demo session. Register

Privacy & Security

Security, data privacy, and compliance

Security and privacy by design, built for enterprise. The same controls cover teams hiring in the United States and the European Union.

Where do you hire?

Audits and certifications

SOC 2 Type II

Certified for 5 consecutive years.

ISO 27001

Compliant with the ISO 27001 standard.

CCPA

GDPR compliant, with privacy by design.

GDPR

GDPR compliant, with privacy by design.

NYC LL144

Independently audited on a monthly basis.

EU AI Act

Independently audited for EU AI Act compliance, monthly.

No model training

Your data is never used to train other models.

Security

Compliance

SOC 2 Type II certified and ISO 27001 compliant.

Penetration testing

Annual penetration tests and weekly vulnerability scans.

Encryption

Encrypted at rest and in transit.

Continuous monitoring

Real-time application and infrastructure monitoring.

Vendor security

Regular security reviews of critical vendors.

Access

SSO / SAML

Seamless access with your identity provider.

Access management

Strict access controls and least privilege.

Audit logs

Key actions logged for audit readiness.

Integrations

Secure integrations with 30+ enterprise tools.

AI compliance

United States

NYC LL144

Independently audited on a monthly basis.

European Union

EU AI Act

Independently audited on a monthly basis.

High-risk ready

Meeting high-risk AI system requirements.

Human oversight

Humans retain control over final decisions.

AI transparency

AI outputs include evidence and confidence levels.

ISO 42001

Certification planned for H1 2027.

Privacy

You choose where candidate data lives. Infrastructure, subprocessors, and model endpoints stay in that region.

United States

US hosting

Infrastructure, subprocessors, and model endpoints, all in the US.

European Union

EU hosting

Infrastructure, subprocessors, and model endpoints, all in the EU.

Data retention

You control how long your data is retained.

No model training

Your data is never used to train other models.

Consent management

Define legal basis and manage consent centrally.

Data subject requests

Standardized processes for timely request handling.

Scale

Scaled infrastructure

Built on AWS for reliable, high-performance operation.

99.99%

99.99% SLA

Available on Enterprise+ plans and select add-ons.

Public status

Real-time visibility into platform availability.

Need this for a security review?

We can walk through residency, audits, and the controls that apply where you hire.