Compliance

Hiring data is sensitive. We design Zenohire around the principles of data minimization, least-privilege access, and security by default, and we continually invest in our compliance program as the platform and regulations evolve.

• Encryption of data in transit (TLS) and at rest.
• Role-based access controls and tenant isolation for multi-tenant data.
• Audit logging of sensitive actions across the platform.
• Regular backups with tested recovery procedures.

We support customers in meeting their obligations under privacy laws including the EU GDPR, the UK GDPR, and India's Digital Personal Data Protection (DPDP) Act. Our Data Processing Addendum sets out the contractual terms for processing personal data on your behalf.

Our AI features are built as decision-support tools, not automated decision-makers. We provide transparency into how scores and summaries are generated, support human review, and work to reduce bias in screening so that employers can make fair, accountable hiring decisions.

We assess the security and privacy posture of sub-processors before onboarding and bind them to data protection terms. A current list of sub-processors is available on request.

We maintain an incident response process and will notify affected customers without undue delay in the event of a data breach affecting their data, consistent with our contractual and legal obligations.

For security questionnaires, audit reports, or details about our current certifications and frameworks, contact [email protected].