Trust and security
Security you can count on, all-together in Greenhouse
We prioritize security, privacy, compliance and reliability by keeping up with key certifications and global compliance standards, undergoing regular third-party audits and more.
Product security
Best-in-class product security features and programs to keep all your data safe and secure.
Privacy
Built-in features and tools to help customers perform their data privacy duties.
Compliance
Annual audits to ensure ISO certification and global compliance standards are being met.
Reliability
Top-tier computing infrastructure and recoverability practices so you can trust our platform is working for you.
Software security you can trust

A safer system
Product security features – Single sign-on, SCIM user provisioning, audit log API, permissions approvals and a dedicated security team with a 24/7/365 security operations center
Security program – Annual third-party penetration testing, a bug bounty program, embedded security throughout the development cycle and encryption in transit and at rest

Comprehensive data protection
Privacy by Design – Platform comes with built-in features and tools to help customers perform their data privacy duties
Customer data access – Strict policies, training and controls are in place to maintain data privacy
Data transfers – Cross-border data transfers subject to EU-US DPF, UK Extension to the EU-U.S. DPF or Swiss-US DPF

Global compliance standards
Third-party audits – Annual audits against SOC 1 Type 2 and SOC 2 Type 2
ISO certifications – Certified for ISO 27001:2013 and ISO 27701:2019
Data privacy regulations – GDPR, CCPA/CPRA, PCI DSS, EU-U.S. DPF, UK Extension to the EU-U.S. DPF, Swiss-U.S. DPF and other national and international privacy frameworks

Reliable platform performance
Network infrastructure – Multi-tier network environment and computing infrastructure by Amazon Web Services
Recoverability and incident response – Routine backups and disaster recovery tests, as well as robust incident response and post-mortem processes
Internal practices – Dedicated performance-focused development team and consistent meeting of uptime SLAs
Our ethical commitment
Greenhouse operates by a set of principles when evaluating new and existing features or products, managing sensitive data and integrating AI responsibly.
