Is Talent Plus penetration tested?

Talent Plus hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Is Talent Plus secure?

Security isn't a single yes/no, but Talent Plus is SOC 2 compliant and holds ISO 27001, GDPR, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Does Talent Plus have a bug bounty or vulnerability disclosure program?

Talent Plus hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@talentplus.com or via a /security page (Talent Plus lists a security contact).

Who are Talent Plus's subprocessors?

Talent Plus lists 15 subprocessors on its trust center, including Amazon Web Services, Auth0, Bitbucket, Vanta, Salesforce. Buyers use this for fourth-party risk review.

Where is Talent Plus's trust center or security page?

Talent Plus's trust center is at https://trust.talentplus.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Is this your company? Buyers are checking Talent Plus here. Claim talentplus.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free

Talent Plus

Q: Where does Talent Plus host or store data?

Talent Plus hosts on AWS, GCP, Azure, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.

talentplus.com · United States· 51–200 employees· Security contact

Security overview Compliance Penetration test

Trust level

Listed

Unverified

Listed

Domain

Report

Live

Sourced from public information. Not yet verified by the company.

Talent Plus is SOC 2 compliant. Talent Plus also holds ISO 27001, GDPR, and CCPA.

Request report access Claim this profile

Framework

SOC 2

Auditor

Not publicAdd

Last report

—Add

Renewal

UnknownAdd

View official trust center ↗

About

Talent Plus, Inc. is the premier human capital and talent management consulting partner. We help individuals and organizations actualize their potential and realize their best future. We are experts across the talent lifecycle. Our data-based solutions enable organizations to scientifically assess, select, onboard, develop, coach, engage, promote, and retain the right people with the right talents to exceed even the most audacious business and team objectives. We pave the way for individuals and organizations to exceed the expectations of their clients, markets, and communities. Our clients ga

Compliance & infrastructure

ISO 27001 GDPRCCPA

Hosting

AWSGCPAzure

Data handled

Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information

Subprocessors

A
Amazon Web Services · Cloud provider
A
Auth0 · Identity provider
B
Bitbucket · Version control
V
Vanta · Security
S
Salesforce · Sales
C
CrowdStrike · Security
C
ClickUp · Collaboration
H
HubSpot · Marketing
G
Google Cloud · Other
M
Microsoft Azure · Cloud provider
O
Office 365 · Document management
Q
Qualys · Security

Show all 15 subprocessors

S
SnowFlake · Data storage and processing
S
SonarCloud · Security
T
Tableau · Data analytics

Compliance leadership

The person who leads Talent Plus's SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. Talent Plus's penetration test vendor isn't listed yet.

Claim this profile to add it.

This listing is partial

6/11 details · 55%

SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

Auditorraises trust
Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
Report dateraises trust
Add your most recent report period so buyers see how current your SOC 2 is.
Renewal date
Add your renewal window so buyers know your coverage is active.
Documents
List the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
Security controls
Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.

Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is Talent Plus SOC 2 compliant?

Talent Plus is SOC 2 compliant. On SOC2C this listing is Listed.

Is Talent Plus ISO 27001 certified?

According to Talent Plus's public trust center, Talent Plus is ISO 27001 certified. On SOC2C this listing is Listed.

Is Talent Plus GDPR compliant?

According to Talent Plus's public trust center, Talent Plus is GDPR compliant. On SOC2C this listing is Listed.

Is Talent Plus CCPA compliant?

According to Talent Plus's public trust center, Talent Plus is CCPA compliant. On SOC2C this listing is Listed.

Can I use Talent Plus's SOC 2 for a vendor risk assessment?

Yes. Talent Plus's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Show 6 more questions

Answers published by Talent Plus

Reproduced from Talent Plus's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗

Do you encrypt data at rest?

Data at rest is encrypted using AES 256

Do you support Single Sign-On (SSO)?

Yes

Where are your servers located?

TalentBank is hosted by AWS in the Oregon Region US-WEST-2 - Each AWS Region is a separate geographic area. Each AWS Region has multiple, isolated locations known as Availability Zones. The Zones inside the Oregon region are us-west-2a, us-west-2b and us-west-2c. All application data is mirrored across the Oregon availability zones. In the case that one zone becomes unresponsive auto failover directs traffic to another zone. Point in time backups are maintained using AWS RDS Relation Database Service.

Is there an SLA for resolving identified security issues?

We currently have various Service Level Agreements in place with clients that include guarantees about performance, availability of services, support accessibility, and performance outcomes for their employees chosen through our assessments. These agreements require an equal risk sharing ratio that totals no more than 10% of the total contract amount, and no goals should be higher than internal company goals. These agreements are made on a very individual basis with clients and can be negotiated after the award is made.

Do you encrypt data in transit?

TLS 1.2 is used in transit

Show 3 more questions

Business & Industrial peers that completed SOC 2

Compare vs Newsworthy.ai Compare vs Octopus Deploy Compare vs 1099-Prep

About

Compliance & infrastructure

Subprocessors

Compliance leadership

Penetration test

This listing is partial

Frequently asked

Answers published by Talent Plus

Business & Industrial peers that completed SOC 2

Newsworthy.ai

Octopus Deploy

1099-Prep

Ask Ai