// Trust & Security Report
Phenom
AI-powered talent intelligence platform for talent acquisition, talent management, HRIT, and onboarding with agentic AI for HR workflows
Certifications held
9
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on phenom.com“Phenom has received its ISO 27001 Certification, which means it has met the standard for protecting and managing employee, company, customer, and partner information.”
Verify on trust.phenom.com“ficate 2026 Phenom ISO 27701 Certificate 2026 Phenom ISO 27001 Certificate 2026 SOC2 Type II Phenom SOC 2 Type II Penetration Testing Reports Phenom PCS Pentest Report Phenom CRM_Web Application Pentest R”
Verify on trust.phenom.com“FAQ Updates Compliance ISO 27001:2022 ISO 27017 ISO 27018 ISO 27701 SOC 2 GDPR CCPA COMPLIANT CCPA Resources View all Security Information Security policy Phenom Disaster Recovery Phenom Security”
Verify on phenom.com“Type II report covering security and privacy of customer data. Learn More UK Cyber Essentials Plus UK government information security assurance scheme. Learn More CSA (Cloud Security Alliance) Membership to global”
Verify on phenom.com“Phenom is an official member of the Cloud Security Alliance providing guidance on the adoption and secure use of cloud computing.”
Verify on phenom.com“Mark valued by financial sector purchasers demonstrating organizational commitment to security and compliance.”
> Show 4 unconfirmed / not-held certifications
source: phenom.comNo public evidence of current HIPAA certification or BAA offering. Blog mentions healthcare-specific AI tools are 'being developed with built-in HIPAA... capabilities' (future tense), but not currently certified.
source: phenom.comNo public evidence of PCI DSS certification, though AWS infrastructure is PCI Level 1 certified.
source: phenom.comPhenom states it 'aligns with the NIST AI Risk Management Framework and ISO 42001' but does not claim certification; alignment is not the same as third-party certification.
source: phenom.comPhenom is CSA member but no STAR (Security, Trust & Assurance Registry) certification mentioned in public materials.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Not publicly specified; company states data may be transferred to countries other than origin; complies with EU-U.S. DPF and UK Extension. Specifics available upon request to sales.
Phenom explicitly avoids training on demographic or biometric data. Uses 'job-relevant variables' and applies 'science-based practices from industrial organizational psychology, machine learning, and statistics.' Fit Score undergoes annual independent audits confirming fairness with 'no adverse impact or bias detected.' Does not share candidate PII with third parties unless contractually required.
// Security controls
Data encryption at rest
Encryption options available for sensitive data at rest; encrypted application database backups (daily on-site, weekly off-site)
phenom.comAuthentication
SSH key-based authentication (not passwords); MFA required minimum three times for data center access
phenom.comAccess control
Role-based access control (RBAC) model with 24/7 operations center monitoring
phenom.comApplication security testing
Annual third-party penetration testing; quarterly DAST/SAST scanning; internal testing
phenom.comInfrastructure
Hosted on AWS secure data centers with firewall security groups, automatic fire detection/suppression, fully redundant electrical power with UPS backup, 24/7 monitoring
phenom.comDisaster recovery & business continuity
Documented processes for recovery of critical business processes, people, and IT systems
phenom.com// Products & data scope
Data it handles: Candidate data, job applications, engagement data
Modules include candidate experience, job recommendations, career site, talent marketplace, chatbot, SMS messaging, campaigns
Data it handles: Employee data, performance, career progression, succession planning
Includes career advancement, job architecture, development journeys, succession planning, manager dashboards
Data it handles: Integrated HR data across systems
Creates integrated HR ecosystem, talent data orchestration, automation
Data it handles: New hire data, onboarding workflows
Accelerates new hire engagement and integration
Data it handles: HR process data
Agentic AI for specific industry and job role use cases; interview scheduling, candidate screening, job recommendations
// At a glance
Pricing model
Not publicly disclosed; enterprise pricing model typical for talent platform (contact sales)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Phenom People, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
trust.phenom.com// Trust reports for comparable tools
Other tools in the same category, each with its own sourced report.