Is this your company? Buyers are checking HeyJobs GmbH here. Claim heyjobs.co free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
HeyJobs GmbH
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
HeyJobs GmbH is SOC 2 compliant. HeyJobs GmbH also holds GDPR.
About
Our purpose at HeyJobs is to enable everyone to find the right job to live a fulfilling life. To achieve this, we aim to build the fastest growing talent platform in Europe, leveraging Machine Learning algorithms, cutting-edge technology and performance marketing to perfectly match talent and jobs.
Compliance & infrastructure
Data handled
Customer personally identifiable informationCredit card informationPersonal health information
Documents
3Compliance leadership
The person who leads HeyJobs GmbH's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. HeyJobs GmbH's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
4/11 details · 36%SOC2C shows the verified essentials. 7 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- SubprocessorsList your subprocessors so buyers can assess fourth-party risk, the way your trust center does.
- HostingAdd where you host (AWS, GCP, Azure) and data residency.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is HeyJobs GmbH SOC 2 compliant?
HeyJobs GmbH is SOC 2 compliant. On SOC2C this listing is Listed.
Is HeyJobs GmbH GDPR compliant?
According to HeyJobs GmbH's public trust center, HeyJobs GmbH is GDPR compliant. On SOC2C this listing is Listed.
Can I use HeyJobs GmbH's SOC 2 for a vendor risk assessment?
Yes. HeyJobs GmbH's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is HeyJobs GmbH penetration tested?
HeyJobs GmbH hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is HeyJobs GmbH secure?
Security isn't a single yes/no, but HeyJobs GmbH is SOC 2 compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does HeyJobs GmbH have a bug bounty or vulnerability disclosure program?
HeyJobs GmbH hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@heyjobs.co or via a /security page (HeyJobs GmbH lists a security contact).
Who are HeyJobs GmbH's subprocessors?
HeyJobs GmbH's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does HeyJobs GmbH host or store data?
HeyJobs GmbH's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is HeyJobs GmbH's trust center or security page?
HeyJobs GmbH's trust center is at https://trust.heyjobs.co. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by HeyJobs GmbH
Reproduced from HeyJobs GmbH's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
Status Page of HeyJobs Systems
Status Page
Where are your servers located?
HeyJobs uses AWS as our host server. The server location is Frankfurt am Main (EU-West zone). All data on the servers is encrypted and HeyJobs holds the master key to decrypt the data. Thus, decryption from external sources is not possible.
Do you encrypt data at rest?
HeyJobs classifies data and information systems in accordance with legal requirements, sensitivity, and business criticality in order to ensure that information is given the appropriate level of protection. Information systems and applications (e.g. customer data or talent data) shall be classified according to the highest classification of data that they store or process. Therefore all sensitive data is encrypted at rest (AES256) and in transit over public networks in accordance with our cryptography policy.
Do you use vulnerability scans?
HeyJobs use various tools to keep our systems secure, such as scanning containers and analyzing code for security issues. HeyJobs also uses external scanners like Detectify, which check our systems multiple times a day for any weaknesses, even the most recent ones.
Want to report a potential security issue?
Heyjobs take security matters with utmost seriousness. If you identify a potential security vulnerability, please forward your findings to security@heyjobs. Ensure you provide comprehensive details regarding the issue. We kindly request that you use the subject line "Potential Security Issue [DATE]" to expedite the review process. Your diligence and cooperation are highly appreciated.
How do you handle a personal data breach?
HeyJobs has a personal data breach incident management policy in place. This ensures that personal data breaches are appropriately communicated to the relevant stakeholders. Furthermore, it shows a clear procedure in the event of a personal data breach.
How do I report an adverse impact of HeyJobs' AI systems?
HeyJobs operates AI systems as part of its AI Management System (AIMS). We take reports of adverse impacts seriously. If you have experienced or observed any harmful, discriminatory, or otherwise adverse impact from one of our AI systems, please contact us at: [security@heyjobs.co](mailto:security@heyjobs.co "mailto:security@heyjobs.co") Please include in your report: - A description of the AI feature or system involved (if known) - The nature of the adverse impact experienced or observed - Any relevant context or supporting information All reports will be reviewed by our Legal and Compliance team within 10 business days.
Who is your Data Protection Officer?
The data protection officer of HeyJobs is DataCo GmbH Sandstraße 33 80335 Munich Germany Email: dataprivacy@heyjobs.co
Where is your Privacy Policy?
Privacy Policy
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public