Our SecurityApproach@2021 Recruitee BV. All Rights Reserved.

Security at Recruitee
Recruitee helps recruitment teams to hire better
together. And when it comes to hiring, we know a
ton of sensitive and conﬁdential information is being
shared from candidates to recruiters to hiring
managers and beyond.
That’s why we’ve made information security acornerstone of our operations and are transparent
about our practices and approaches.
You can rest assured that your data and yourcandidates’ data are safe and secure, so you canfocus on ﬁnding and hiring the best talent.

@2021 Recruitee BV. All Rights Reserved.

Awareness & Training
Strong information security starts with a team that isaware of the importance of information security.
This awareness is instilled in Recruitee employees
from day one of their employment, and awarenesssessions are repeated on at least a yearly basis.
Different types of awareness sessions and training
are provided, depending on the role of the employee.

@2021 Recruitee BV. All Rights Reserved.

Information Security
Management System (ISMS)
An ISMS has been implemented at Recruitee
according to the standards of ISO 27001. Thissystem provides a highly professional framework
for Recruitee’s management to govern Recruitee’s
information security efforts.
The ISMS warrants regular risk assessments,audits, planning, policy updates, and more. Clickhere to download our ISO 27001 certiﬁcate andISO 27001 Statement of Applicability.

@2021 Recruitee BV. All Rights Reserved.

Service Organization Control Type
2To provide additional assurance, in addition toISO 27001, Recruitee has implemented the SOC
2 Trust Service Criteria.
After rigorous third-party examination (audit)
conducted by an independent third party
Recruitee has received a SOC 2 Type II
attestation.
The SOC 2 Type II report is available on request.

@2021 Recruitee BV. All Rights Reserved.

GDPR & CCPA Compliance
By using Recruitee, your organization will have all the tools
you need for your recruitment to be GDPR & CCPA
compliant. From automatic candidate deletion to
streamlined data subject request processing.
All personal data that we process on your behalf isprocessed in the European Union; the Recruitee application
is not dependent on transfer mechanisms for GDPRcompliance.
Last but not least, Recruitee provides a data processingagreement (DPA) that meets all the requirements of theGDPR and CCPA. Click here to view our DPA and here toview our privacy policy.
@2021 Recruitee BV. All Rights Reserved.

Auditing & Third-Party
Assurance
At Recruitee, we believe in the strength of ourinformation security. But you don’t just have to takeour word for it.
Our information security management system(ISO 27001) is audited every year by an accredited
third-party auditor, and the application is subjected topenetration tests by a third party on at least a yearlybasis.
Click here to download our ISO 27001 certiﬁcate andISO 27001 Statement of Applicability.

@2021 Recruitee BV. All Rights Reserved.

Application Security
The Recruitee application has many features thatenhance its information security. For example, an
SAML 2.0 integration and visibility features to hide
sensitive data from colleagues.
Under the hood, the application also meets industry
standards in terms of secure coding. Every piece ofcode that we write for the application goes throughcode review and quality assurance.
Employees are trained and instructed to prevent
vulnerabilities such as those part of the OWASPTop 10.

@2021 Recruitee BV. All Rights Reserved.

Disasters & Incidents
Our organization has plans in place for business
continuity, disaster recovery, and security incidentresponse. Key employees are aware of theirresponsibilities. And post mortems take place afterincidents to make sure that each incident provides
learning for the organization.
Much of our business continuity, disaster recovery, andsecurity incident response efforts have been outsourced
to the industry-leading hosting providers that we usefor our main infrastructure (AWS and GCP). The maininfrastructure is always hosted in multiple data centers
for the purpose of failover.

@2021 Recruitee BV. All Rights Reserved.

Logging and monitoring
Recruitee has logging and monitoring in place formany critical elements of its application andcompany infrastructure.
That allows us to act against cyber security attacks
proactively.
The logs are monitored for anomalies by ourengineers and security team.

@2021 Recruitee BV. All Rights Reserved.

Need more information?
Contact sales@recruitee.com@2021 Recruitee BV. All Rights Reserved.