Security & Trust
HRMLESS is committed to protecting your data. We maintain SOC 2 Type II compliance and continuously monitor our security controls to keep your information safe.
SOC 2 Type II Certified
Audit Period: February 1, 2026 – May 1, 2026
Auditor: Johanson LLP
AI Bias & Fairness Tested
Controlled counterfactual evaluation across gender, race/ethnicity, and age. July 2026 production attestation: PASS.
NYC LL144 Compliant — Selection rates & impact ratios across sex, race/ethnicity, and intersectional categories.
Independently audited against NIST AI RMF 1.0 (July 2026): SATISFACTORY.
Compliance at a glance
Security Measures
32
Active
TSC Controls
33
In scope
Policy Documents
100
Published
Vendors Assessed
12
Monitored
How we protect your data
Encryption
AES-256 at rest, TLS 1.3 in transit. Secrets managed via HashiCorp Vault with HA Raft storage.
Access Controls
Entra ID with MFA enforcement, RBAC via Keycloak, quarterly access reviews for all personnel.
Monitoring
Continuous infrastructure and application monitoring with centralized logging and alerting.
Vendor Security
12 vendors assessed for security posture. SOC 2 reports collected and reviewed annually.
AI Fairness
Controlled counterfactual bias testing across gender, race, and age. Production-attested, NIST AI RMF aligned.
Need more details?
Authorized customers and auditors can access the full compliance dashboard, policy documents, and audit snapshots.