SOC 2 Compliance at
HireNext
HireNext is committed to SOC 2 compliance — demonstrating that our security, availability, confidentiality, and privacy controls meet the rigorous standards set by the American Institute of Certified Public Accountants (AICPA).
Table of Contents
What Is SOC 2?
SOC 2 (System and Organization Controls 2) is an auditing framework developed by the AICPA that evaluates how a service organization manages customer data based on five Trust Service Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy.
There are two types of SOC 2 reports:
Evaluates whether controls are suitably designed at a specific point in time.
Evaluates whether controls are operating effectively over a period of time (typically 6–12 months). More rigorous and trusted.
Trust Service Criteria
HireNext's SOC 2 audit covers all five Trust Service Criteria:
The system is protected against unauthorized access, use, or modification. This is the mandatory criteria for all SOC 2 audits.
The system is available for operation and use as committed or agreed. Covers uptime, performance, and disaster recovery.
Information designated as confidential is protected as committed or agreed. Covers data classification and access controls.
Personal information is collected, used, retained, disclosed, and disposed of in conformity with the entity's privacy notice.
System processing is complete, valid, accurate, timely, and authorized to meet the entity's objectives.
Security Controls
HireNext implements comprehensive security controls across all layers of our platform:
Availability
HireNext maintains high availability through redundant infrastructure, automated failover, and proactive monitoring:
- 99.9% Uptime SLA for all production services
- Multi-region infrastructure with automatic failover
- Daily automated backups with tested restoration procedures
- Disaster Recovery Plan (DRP) with defined RTO and RPO targets
- Real-time status page at status.hirenext.io
- Scheduled maintenance windows communicated in advance
Confidentiality
HireNext treats all customer data as confidential and implements controls to ensure it remains protected:
- Data classification policy with defined handling requirements per classification level
- Strict access controls ensuring customer data is isolated and not accessible across tenants
- Non-disclosure agreements (NDAs) with all employees and contractors
- Secure data disposal procedures for decommissioned hardware and terminated accounts
- Customer data is never used for training AI models without explicit consent
Privacy
HireNext's privacy controls align with both SOC 2 requirements and applicable privacy regulations including GDPR:
- Privacy notice clearly communicates data collection, use, and retention practices
- Consent mechanisms for marketing and non-essential data processing
- Data subject request handling procedures with defined response timelines
- Privacy impact assessments for new features involving personal data
- Sub-processor management with contractual privacy obligations
Audit Scope & Timeline
HireNext is currently undergoing SOC 2 Type II audit. The audit covers our core platform infrastructure, data processing systems, and organizational controls.
Enterprise customers may request access to our SOC 2 report under NDA. Contact security@hirenext.io.
Request SOC 2 Report
Enterprise customers and prospects can request access to our SOC 2 report. All requests are subject to NDA execution.
Questions about our security posture?
Our security team is available to answer questions about SOC 2 compliance, controls, and audit status.
Contact Security Team