Your HRIS is crucial for managing the people in your organization, giving you valuable people analytics, salary information, company financials, and more that help you understand your workforce and make strategic decisions for your people. With all this sensitive data, your HR platform must be well protected to keep it safe, secure, and safeguarded from malicious activity.
Data security has become a widespread concern in recent years, and governments worldwide have enacted laws directed at protecting personal data. The most well-known, and currently the world’s strictest privacy and security law, is the General Data Protection Regulation (GDPR) which became part of EU law in May 2018 and heavily penalizes companies that violate its directives.
At HiBob, we take these laws about data security seriously. We uphold the highest information security and privacy standards for our HR platform, Bob, as part of our commitment to providing an exceptional user experience for over 3,000 customers. From safeguarding personal data to ensuring secure integrations with third parties, we’re dedicated to keeping your data safe and secure. Read on to discover more about how we prioritize data security for our customers worldwide.
Complying with the highest security standards from the ground up
As part of our commitment to data security regulations, we act according to the highest security standards in the SaaS HR software industry. Bob complies with ISO27001 and ISO27018 and is SOC2 Type 2 and SOC1 Type 2 certified. For more technical and legal details about our security standards and compliance, see our Trust Center.
We also have a robust security team headed by our Chief Information Security Officer (CISO) which includes a full-time Data Privacy Officer (DPO) who is an expert in data privacy laws, including GDPR. They are heavily involved in the day-to-day operations of HiBob on many fronts, from the development of our platform to talking with prospects.
From a product perspective, our security team works with our product team to ensure that every feature and process that is created in Bob and includes data is protected and compliant from the ground up. Additionally, after a detailed RFP process in which all of our certifications and security documents are shared, our CISO and DPO are available to speak with prospects and answer any questions they may have about security and privacy for their specific industry or local regulations.
Keeping your data safe and secure
We are dedicated to providing you with an HR platform that you can love and trust. We continuously improve Bob, including analyzing our existing features, adding new capabilities, and investigating any bugs flagged by our customers. To investigate these concerns, customer success professionals and developers may need to access customer accounts.
To ensure compliance with the most stringent security framework certifications, Bob has the following safeguards in place that enable us to keep your data secure and give our customers the power to control who in their company can access sensitive information.
1. Roles and permissions
We’ve built roles and permissions into Bob so that you can set permissions for the actions people can perform and the data they can see. For example, you can define that only the employee, their manager, and the HR team can view an employee’s salary. Roles and permissions are set by each company individually.
2. Data encryption
Bob’s database has several layers of end-to-end encryption to protect sensitive data and comply with data security requirements.
3. Consent
Another layer of security that protects our customers’ accounts is consent. If a HiBob employee needs to access a customer account for maintenance or fixing bugs, they must first receive permission. This is done through a special section in the Bob platform where the customer pushes a button stating that they grant access to their account for a limited time.
Securing Bob’s third-party integrations
Bob sits at the center of our customers’ HR tech stack, integrating with over 100 tech tools, from applicant tracking systems and developer tools to travel management tools and single sign-on providers (SSO). These integrations allow you to seamlessly transfer data between Bob and third-party solutions to avoid double entry, create more streamlined processes, and save time.
Our security team conducts rigorous security checks for every integration, ensuring that each tool complies with the highest security standards. By completing a thorough due diligence process, we can deliver a safe HR platform for our customers.
For a full list of our integrations, visit the HiBob Marketplace.
Recommended For Further Reading
Ensuring the highest data security standards for over 3,000 customers
Your HR platform is the heart of your organization, providing essential data to help you make strategic decisions for your people. However, it also contains sensitive information that must not fall into the wrong hands. Our HR platform, Bob, complies with the most stringent security standards that ensure that your data is protected. From GDPR requirements to secure integrations with third parties, our security team works around the clock to ensure we always comply with the industry’s highest data security standards and best security practices, keeping your data safe, secure, and safeguarded from malicious activity.
