// Trust & Security Report
Phenom People, Inc.
AI-powered talent intelligence platform for talent acquisition, talent management, HRIT, and onboarding with agentic AI for HR workflows
Certifications held
9
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on phenom.com“Phenom has received its ISO 27001 Certification, which means it has met the standard for protecting and managing employee, company, customer, and partner information.”
Verify on phenom.com“Cloud security controls standard for 'safer cloud-based environment and reduce the risk of security problems.'”
Verify on phenom.com“Protects 'personal data stored in the cloud' and helps providers assess risk for PII protection.”
Verify on phenom.com“A privacy extension to the ISO/IEC 27001 certifications that requires organizations to establish, implement, maintain, and improve a Privacy Information Management System.”
Verify on phenom.com“Phenom meets the standards of SOC 2 with report covering 'security and privacy of customer data.'”
Verify on phenom.com“General Data Protection Regulation compliance with standard contractual clauses for international transfers. 'When we do transfer your personal information, we put in place appropriate safeguards (such as standard contractual clauses) in accordance with applicable data protection laws.'”
Verify on phenom.com“UK government information security assurance scheme held as certification.”
Verify on phenom.com“Phenom is an official member of the Cloud Security Alliance providing guidance on the adoption and secure use of cloud computing.”
Verify on phenom.com“Mark valued by financial sector purchasers demonstrating organizational commitment to security and compliance.”
> Show 4 unconfirmed / not-held certifications
source: phenom.comNo public evidence of current HIPAA certification or BAA offering. Blog mentions healthcare-specific AI tools are 'being developed with built-in HIPAA... capabilities' (future tense), but not currently certified.
source: phenom.comNo public evidence of PCI DSS certification, though AWS infrastructure is PCI Level 1 certified.
source: phenom.comPhenom states it 'aligns with the NIST AI Risk Management Framework and ISO 42001' but does not claim certification; alignment is not the same as third-party certification.
source: phenom.comPhenom is CSA member but no STAR (Security, Trust & Assurance Registry) certification mentioned in public materials.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Not publicly specified; company states data may be transferred to countries other than origin; complies with EU-U.S. DPF and UK Extension. Specifics available upon request to sales.
Phenom explicitly avoids training on demographic or biometric data. Uses 'job-relevant variables' and applies 'science-based practices from industrial organizational psychology, machine learning, and statistics.' Fit Score undergoes annual independent audits confirming fairness with 'no adverse impact or bias detected.' Does not share candidate PII with third parties unless contractually required.
// Security controls
Data encryption at rest
Encryption options available for sensitive data at rest; encrypted application database backups (daily on-site, weekly off-site)
phenom.comAuthentication
SSH key-based authentication (not passwords); MFA required minimum three times for data center access
phenom.comAccess control
Role-based access control (RBAC) model with 24/7 operations center monitoring
phenom.comApplication security testing
Annual third-party penetration testing; quarterly DAST/SAST scanning; internal testing
phenom.comInfrastructure
Hosted on AWS secure data centers with firewall security groups, automatic fire detection/suppression, fully redundant electrical power with UPS backup, 24/7 monitoring
phenom.comDisaster recovery & business continuity
Documented processes for recovery of critical business processes, people, and IT systems
phenom.com// Products & data scope
data: Candidate data, job applications, engagement data
Modules include candidate experience, job recommendations, career site, talent marketplace, chatbot, SMS messaging, campaigns
data: Employee data, performance, career progression, succession planning
Includes career advancement, job architecture, development journeys, succession planning, manager dashboards
data: Integrated HR data across systems
Creates integrated HR ecosystem, talent data orchestration, automation
data: New hire data, onboarding workflows
Accelerates new hire engagement and integration
data: HR process data
Agentic AI for specific industry and job role use cases; interview scheduling, candidate screening, job recommendations
// At a glance
Pricing model
Not publicly disclosed; enterprise pricing model typical for talent platform (contact sales)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Phenom People, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
trust.phenom.com