Build Stronger Teams with Secure, Fair, and Scalable Hiring
Hiring involves sensitive data—candidate information, interview feedback, internal assessments. SocialTalent treats that seriously. Our platform combines learning and interview intelligence with the security standards and compliance frameworks enterprises actually need.
SocialTalent meets the security requirements you’d expect from any business-critical system:
Certified & compliant
SOC 2, ISO 27001, GDPR-ready, and enterprise-tested.
Built for scale
Role-based access and SSO/SCIM for streamlined global deployment
Proactively monitored
Continuous system monitoring and regular audits
Transparently managed
Clear escalation and incident protocols
Comprehensively protected
Candidate data, interviewer feedback, and all interactions are encrypted and secured
Compliance in the Interview Process
Inconsistent interviews create legal risk. SocialTalent reduces that risk by standardizing how interviews are conducted:
- Bias-aware frameworks help maintain consistency across interviewers and teams
- Complete audit trails for legal reviews and dispute resolution
- Global consistency across regions and hiring managers
Compliance Built Into Every Learning Experience
Training needs to keep pace with regulations. SocialTalent’s learning platform handles this by:
- Keeping content current with evolving regulations and best practices
- Tracking completions and certifications for audit requirements
- Delivering consistent training globally
Have Security Questions?
Need to review our SOC 2 report? Have specific compliance requirements? Working through a security questionnaire? Our team can walk you through our security framework, share certification documentation, and address your specific deployment requirements.
Talk to Our Security & Compliance Team
Whether you’re evaluating us as a new vendor or need documentation for an existing deployment, we’ll walk through:
- Our security certifications and compliance framework (SOC 2, ISO 27001, GDPR)
- Data handling, encryption, and residency requirements
- Access controls, SSO/SCIM integration, and role-based permissions
- Incident response protocols and monitoring practices
- Custom security requirements for your organization
Direct access to our team—the same people who’ve handled security reviews for highly regulated enterprises across financial services, healthcare, and government sectors.
FAQ
Is SocialTalent EN ISO 27001:2017 certified?
Yes. SocialTalent is delighted to share we are EN ISO 27001:2017 certified EN ISO 27001:2017 is the internationally recognized best practice framework for an ISMS (information security management system</a>) and one of the most popular information security management standards worldwide.
Does SocialTalent have a privacy policy?
Yes. The SocialTalent Privacy Policy can be found here.
What is SocialTalent’s data retention policy?
The personal data will be processed for the duration of the Agreement and for thirty (30) days following termination.
Does SocialTalent work with 3rd parties that subprocess customer data?
Yes. The list of sub-processors may be viewed in ANNEX 1 – DATA RECORD on the SocialTalent Terms and Conditions document.
Does SocialTalent have Single sign-on (SSO) capabilities?
Yes. SocialTalent supports SSO with any platform that supports SAML 2.0.
Does SocialTalent execute penetration tests by an independent 3rd party organization?
Yes. Penetration tests are run by a reputable 3rd party firm not less than every 12 months. Findings are assessed, prioritized, and acted upon based on the extent of their severity.
Does the SocialTalent Platform encrypt data at rest?
Yes. SHA256 hash algorithm is used to encrypt data when stored at rest
Does SocialTalent maintain a suite of documentation related to policies, processes, and procedures related to data privacy and information security?
Yes. Additional documentation is available upon request. Please reach out to support
What types of personal data does SocialTalent need to process?
SocialTalent requires user names and email addresses to perform one or more of the following functions:
- Facilitate logins.
- Report on learning progress and activity analysis.
- Report on learning progress and activity analysis.
- Share endorsements (kudos) based on specific learning events or activities on the platform.
The SocialTalent platform does not process sensitive personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation, or data relating to an individual’s banking or credit card details.
Does SocialTalent have a data privacy agreement (DPA)?
Yes. The SocialTalent DPA can be found in Schedule 1 of the SocialTalent Terms and Conditions document
Where is the SocialTalent platform hosted?
The SocialTalent platform is hosted by Amazon Web Services (AWS) in Dublin, Ireland. Data is backed up to a data center in Frankfurt, Germany.
How does SocialTalent perform back-ups?
Backups are completed periodically throughout each day. They are encrypted and stored on separate devices, and also in a separate AWS data center (Frankfurt, Germany). The MD5 sum is checked after each backup.
What data is shared when integrating with SocialTalent?
Our integrations are based on file links. We share two types of information.
- Content: We share links (typically links to missions) on other LMSs and LXPs
- Completions: When a learner completes content (and typically earns a badge), we share that data on the customer’s LMS or LXP.