Skip to content

IT and Security

Private hosting, certified controls and documented subprocessors

Private hosting on your cloud, certified controls and documented subprocessors.

IT and Security

What you care about

Where data lives, who can access it, how the AI is governed, and whether the vendor will get through your security review without months of back-and-forth.

The proof

  • Certified and assured

    ISO 27001, ISO 42001 and SOC 2 Type II, support for GDPR and CCPA, and independent AI assurance from Warden AI. Details are in the Trust centre.

  • Hosted privately, on your cloud

    Cloud-agnostic deployment on AWS, Microsoft Azure, Google Cloud or Oracle Cloud, with regional data residency, AES-256 at rest and TLS 1.2/1.3 in transit.

  • Enterprise access controls

    SAML 2.0 and OpenID Connect single sign-on, role-based access, MFA for privileged access and SCIM provisioning.

Products that help

Common questions

Where is candidate data hosted?

Wherever you prefer. Recruitment Smart is cloud-agnostic and is hosted privately on AWS, Microsoft Azure, Google Cloud or Oracle Cloud, with regional deployment for data residency. The same controls apply everywhere: ISO 27001, SOC 2 Type II, support for GDPR and CCPA, and independent AI assurance from Warden AI.

Is customer data used to train AI models?

No. Customer data is never used to train base AI models unless that is explicitly agreed in a separate contract. Protected attributes such as health, political views and biometric data are excluded from processing and training.

How do we get your security documentation?

Public documents, including the CSA STAR CAIQ and the Warden AI bias report, are linked in the documentation section. Others, such as SOC 2 Type II and ISO/IEC 27001 evidence, are shared on request with your security or procurement team.

A demo built around your priorities

Tell us what you need to see and we will tailor the walkthrough to it.