Loading…
Compliance
Compliance built in at the foundation
Security and compliance baked in — not bolted on. SOC 2 Type II, GDPR, and EEOC-ready, so your hiring stays defensible and audit-ready.
SOC 2 Type II
CertifiedHireFlow360 has completed SOC 2 Type II certification, independently audited by a Big Four accounting firm. Our controls cover security, availability, processing integrity, confidentiality, and privacy.
- Annual independent audit
- Continuous monitoring of all security controls
- Penetration testing performed quarterly
- Incident response plan tested bi-annually
- Employee security training required quarterly
GDPR compliant
CompliantAs an employee-first platform, GDPR principles are foundational to HireFlow360. Candidates own their data, control consent at the attribute level, and can exercise all data-subject rights directly from their dashboard.
- Data Processing Agreements (DPAs) for all customers
- Right to access, rectify, and delete — self-service
- Consent management built into the profile
- Data portability in machine-readable formats
- EU data residency option available
- Appointed Data Protection Officer (DPO)
EEOC compliance
Built-inHireFlow360 helps employers maintain full EEOC compliance with built-in tracking, reporting, and bias-reduction features. Our AI matching is regularly audited for fairness across protected categories.
- EEO-1 reporting data collection and export
- Adverse impact analysis dashboard
- AI bias audits performed quarterly by a third party
- Anonymized screening option to reduce bias
- Inclusive job-description language checker
- Disposition tracking for all candidates
Data security
Enterprise-gradeAll data is encrypted at rest (AES-256) and in transit (TLS 1.3). Our vault provides zero-trust architecture for sensitive candidate information with role-based access controls.
- AES-256 encryption at rest
- TLS 1.3 for all data in transit
- Zero-trust architecture with RBAC
- SSO via SAML 2.0 and OIDC
- SCIM provisioning for enterprise
- 99.99% uptime SLA available
Need our compliance documentation?
We provide SOC 2 reports, DPAs, and security questionnaire responses to qualified prospects.