Enterprise-Grade Security.
Your Data Stays Yours.

Your candidates, clients, and recruiting data deserve the highest standards of protection. HRmony combines independently audited security controls, privacy-focused practices, and responsible AI.

SOC 2 Type II — Independently Audited

HRmony's security controls have undergone independent SOC 2 Type II examination. An independent auditor evaluated not only whether our controls are designed appropriately, but whether they operated effectively over a defined review period.

Type IIoperating effectiveness
Independentthird-party auditor
On Requestreport under NDA
SOC 2 – Type II
SOC 2 Type II badge — examined by Decrypt Compliance
Examination ReportSOC 2 Type IIHRmony.ai · Security
Examined by
Independent auditor
Evaluates
Design & operation
Access
Available on request

Governance & Monitoring

Defined policies, risk assessment and ongoing monitoring.

Encryption & Infrastructure

Encrypted in transit and at rest on hardened infrastructure.

Identity & Access

Least-privilege access and periodic access reviews.

Incident Response

Procedures to detect, contain and communicate events.

Continuity & Recovery

Backups and recovery planning to keep you running.

Data Ownership

Your Candidates.
Your Clients.
Your Data.

Your recruiting database is one of your most valuable business assets. HRmony does not take ownership of your customer-uploaded data — you remain in control of your candidate and client information.

  • You own your recruiting data
  • Control over candidates & clients
  • Data access & management
  • Export & deletion*
  • Clear processing responsibilities (DPA)

*Subject to supported functionality and contractual requirements.

HRmony workspace analytics: interview queue, recruitment funnel and rejection reasons
Workspace dataCandidates · Clients · JobsYours

Innovation Without Compromising Trust.

Three AI engines — one set of safeguards. Built around controlled access and human judgment.

PULSEAURACREW

Powerful AI. Responsible Data Protection.

Our AI-powered recruiting capabilities are designed with privacy, controlled access, and human oversight in mind — so you benefit from intelligent automation while protecting sensitive candidate information.

Scopedto user permissions
Humanfinal say on decisions
Vettedthird-party AI
Responsible & Secure AI
HRmony AI assistant creating a task and a candidate match score with skill breakdown
Recruiter reviewAI recommends · you decide
PULSE – AI Matching

Matches within your permissions

Ranks candidates using only the records your team can access.

AURA – Profile Enrichment

Enriched data stays yours

Profiles are kept current inside your own workspace.

CREW – AI Agents

Agents with recruiters in control

Sourcing, outreach and screening act within your rules.

Privacy-Aware Processing

AI processes only the data needed for the task.

Controlled Access

Role-based permissions apply to AI like they do to people.

Human Oversight

AI recommends. Recruiters decide.

Responsible Third-Party AI

Providers vetted and bound by data protection terms.

Transparent Data Handling

Clear documentation of AI services and data flows.

Confidential Info Protected

Client briefs, compensation and candidate details stay private.

Privacy & Compliance

Privacy By Design.
Aligned To Global Frameworks.

  • Data Processing Agreement
  • Data Subject Rights
  • Data Minimization
  • Retention & Deletion
  • Privacy By Design

GDPR Ready

Privacy-focused practices supporting EU and UK data protection obligations.

ISO 27001-Aligned

Security practices informed by international information security principles.

The Safeguards Underneath.

  • Encryption In Transit & At Rest
  • Role-Based Access Controls
  • SSO & Enterprise Authentication
  • Security Monitoring
  • Backup & Recovery
  • Incident Response Processes
  • Infrastructure Security
  • All covered inSOC 2 Type II

Security Reviews · DPAs · Questionnaires

Trust Starts
With Transparency.

Request the SOC 2 report, a DPA, or answers to your security questionnaire.