Trust and compliance at
Hello Recruiter
Hello Recruiter runs interviews for every role and every round. Your team sets the criteria and makes every hiring decision. Here's where we stand on the security, privacy, and AI hiring standards you answer to.
SOC 2
ISO 27001
GDPR
CCPA / CPRA
India DPDP
EU AI Act
NYC Local Law 144
Illinois
California
Colorado
Last updated October 12, 2026
In progress means an independent audit or certification is underway. We share reports under NDA once they're issued.
| Framework | Details | Status |
|---|---|---|
| SOC 2 Type I | An independent auditor's assessment of how our security controls are designed. | In progress |
| SOC 2 Type II | An independent audit of how those controls operate over time. Our controls are monitored continuously in the meantime. | In progress |
| ISO/IEC 27001 | Our information security management follows the ISO 27001 standard, and certification is underway. | In progress |
| Third-party penetration testing | Independent security specialists test our application and infrastructure for vulnerabilities. | In progress |
| Framework | Details | Status |
|---|---|---|
| GDPR and UK GDPR | We process candidate data as a processor for our customers, with a data processing agreement, a published sub-processor list, and support for data subject rights. An independent GDPR assessment is in progress. | Ready |
| CCPA / CPRA | We handle California residents' personal information as a service provider under the California Consumer Privacy Act, as amended by the CPRA. | Compliant |
| India DPDP Act | Our data practices are aligned with India's Digital Personal Data Protection Act as its rules phase in. | Aligned |
| Framework | Details | Status |
|---|---|---|
| EU AI Act | The Act treats AI used in hiring as high-risk. Candidates are told when they're interacting with AI, and our human oversight, documentation, and risk controls are designed to the Act's high-risk requirements. | Prepared |
| NYC Local Law 144 | An independent bias audit of our AI resume screening and AI interviews is in progress. We'll publish the summary so employers can meet their notice and disclosure requirements. | In progress |
| Illinois AI Video Interview Act and Human Rights Act | Candidates are notified before AI evaluates a video interview, told how it works, and asked for consent. We support deleting interview videos within 30 days of a request. | Compliant |
| California automated-decision system regulations | We keep the records California's employment rules require and support the anti-bias testing employers rely on. | Compliant |
| Colorado AI Act | We're preparing the developer documentation Colorado's law requires ahead of its effective date. | Prepared |
AI evaluates. People decide.
Human review on every decision
AI judgments are routed to your team in the Human Review Center, and your people make the hiring decision.
Criteria your team defines
Every score traces from evidence to signals to competencies, measured against the criteria and weights your recruiters set.
Candidates are told upfront when an AI interviewer is leading the conversation.
Rules that follow the candidate
Jurisdiction detection applies the right notices and review requirements based on where the candidate and role are located.
Integrity flags go to people
Fraud and integrity signals are reviewed by a person before they affect any candidate.
Transparent sub-processors
We list every sub-processor that handles customer data, and organization admins can accept our DPA directly in the product.
Looking for encryption, hosting, and access control details? They're on our Security page.
Legal documents
The binding terms behind this page. If anything here differs from these documents, the documents govern.
Common questions
Is Hello Recruiter SOC 2 compliant?
Our SOC 2 Type I and Type II audits with an independent auditor are in progress, and our security controls are monitored continuously. We share reports with customers and prospects under NDA once they're issued.
Is Hello Recruiter GDPR compliant?
Hello Recruiter is GDPR-ready. We act as a data processor for our customers, provide a data processing agreement, list our sub-processors, and support data subject rights. An independent GDPR assessment is in progress.
Does Hello Recruiter meet NYC Local Law 144?
An independent bias audit of our AI resume screening and AI interviews is in progress. We'll publish the audit summary so employers hiring in New York City can meet their notice and disclosure requirements.
How does Hello Recruiter approach the EU AI Act?
The EU AI Act classifies AI used in hiring as high-risk. We tell candidates when they're interacting with AI, and our human oversight, documentation, and risk controls are designed to the Act's high-risk requirements.
Does AI make the hiring decision?
No. Hello Recruiter evaluates candidates against criteria and weights your team defines. People on your team review the results and make every hiring decision.
How can I get Hello Recruiter's security documentation?
Email ayush@hellorecruiter.ai to request our security package. We share audit reports, policies, and questionnaire answers under NDA.
Need our security documentation?
We share audit reports, policies, and security questionnaire answers with customers and prospects under NDA.
