Security and compliance, built in.
CleoHR handles identity, background, drug and I-9 data, the most sensitive parts of hiring. We protect it with enterprise-grade security and run every check inside the rules that govern it.
How is the data protected?
-
Encrypted end to end
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Sensitive fields get additional protection.
-
SOC 2
Independently audited security controls covering security, availability and confidentiality.
-
Least-privilege access
Role-based access, single sign-on and audit logging: people see only what their job requires.
-
Hardened infrastructure
Enterprise cloud infrastructure with network isolation, backups and continuous monitoring.
-
Tested and monitored
Regular penetration testing, vulnerability scanning, 24/7 monitoring and a defined incident-response plan.
-
Vetted sub-processors
Every lab, screening and infrastructure partner is reviewed and bound by data-protection agreements.
What happens to a worker’s data?
We protect the worker, not just the employer. Frontline workers hand over their most sensitive information to get hired. We treat it like it matters.
- Collected with consent
- Clear notice and consent before any sensitive or biometric data is captured.
- Never sold
- Candidate data is never sold or used for advertising.
- Minimised, and deleted on schedule
- We collect only what is needed and delete on a defined retention schedule.
- Access and deletion rights
- Candidates can ask to see their data and ask for it to be deleted.
Doing diligence? We’ll share our documentation under NDA.
The SOC 2 report, our Data Processing Agreement, the security whitepaper and the sub-processor list.
CleoHR is built to support compliance with the FCRA, BIPA and other biometric-privacy laws, I-9 / E-Verify, DOT, and applicable state and local rules. This page is informational and is not legal advice.
Verified hiring you can trust, and prove.
See how CleoHR protects candidate data and keeps every check compliant, from a single sign-off to an enterprise security review.