Security & Compliance

Built on trust,verified by design.

Every workflow Zyverno automates runs through the same standard data handled with care, decisions you can explain, and a platform your security team will actually approve of.

GDPR-alignedEU GDPR representativeHuman-in-the-loop AISOC 2 Type II infrastructureISO/IEC 27001 certified hosting
EU Data Act certificate of representationGDPR Art. 27 certificate of representation by Prighter
O*NET in-it

This site incorporates information from O*NET Web Services by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). O*NET® is a trademark of USDOL/ETA.

COMPLIANCE

The legal and operational ground rules.

How Zyverno protects candidate and recruiter data, the regulations we follow, and who to contact when you need answers.

Data protection

Enforced

Candidate and client data is encrypted at rest and in transit, stored in access-controlled environments, and never used to train models outside your account. You decide what's retained and for how long.

GDPR compliance

Certified

Zyverno is built around GDPR principles by default: lawful basis for processing, the right to access or erase candidate data, and clear consent flows baked into every screening and chat interaction.

Security policy

Active

Role-based access, single sign‑on, audit logs on every record change, and routine penetration testing keep your hiring data isolated and traceable, end to end.

IT support

24/7

A dedicated technical team is available for onboarding, integrations, and incident response, so security questions get answered by people, not tickets that disappear into queue.

Transparency

By default

Every AI recommendation comes with a visible reason behind it. No hidden scoring, no black-box rejections. Recruiters and candidates can both see what shaped a decision.

DATA CONFIDENTIALITY REQUESTS

Questions about data handling, retention, or your rights as a data subject reach us directly.

dsar@zyverno.app

SECURITY & IT

Reporting a vulnerability or need a technical security review for procurement?

security@zyverno.app

SECURITY

What's actually
protecting your pipeline.

Security pages are usually boring. We tried to keep this one clear: what we protect, how our AI thinks, and the questions we hear most often.

Infrastructure

Hosted on SOC 2 Type II and ISO/IEC 27001 compliant infrastructure, with automated backups and a 99.9% uptime target.

Access control

SSO and role-based permissions mean the right people see only the candidates they need to see.

Candidate data rights

Candidate data can be exported or erased on request, and deleted candidates are anonymised automatically after the retention period.

Reliability

Regular penetration tests, dependency scanning, a published disaster recovery and business continuity plan, and an incident response process keep us proactive.

AI ETHICS

Our AI is an assistant, not a judge.

AI supports decisions. It does not make them.

Candidates are evaluated on skills, experience and role fit. Never on protected characteristics.

Every score is explainable. Recruiters can see why a profile was ranked the way it was.

We test our models for bias and publish fairness metrics to our enterprise customers.

Infrastructure compliance standards

SOC 2 Type IIGlobalISO/IEC 27001GlobalHIPAA / HITECHGlobalGDPREUNIS 2EUDSAEUData Privacy FrameworkEUCCPAUSCPRAUSPIPEDACA

Looking for enterprise solutions?

Discover how manufacturers automate operations with Zyverno.

Explore Solutions

FAQS

Common questions about security

Ready to make hiring effortless?

See how Zyverno unifies your entire recruitment workflow into one calm, intelligent platform, in a 30-minute personalized walkthrough.