Trust Center
Security and compliance, in the open
How CalHire protects your data — certification status, security practices, sub-processors, and how to request our security questionnaire.
Certifications & attestations
Evidence current as of September 27, 2026
SOC 2
SOC 2 Type II
Audit in progress
Security, Availability & Confidentiality Trust Services Criteria
ISO 27001
ISO/IEC 27001
Audit in progress
Information Security Management System (Annex A controls)
Security highlights
- Encryption in transit (TLS) and at rest for all customer data.
- Role-based access control with least-privilege defaults and full audit logging.
- Tamper-evident, append-only audit trail with automated integrity verification.
- Per-region data residency and configurable retention with verifiable erasure (DSAR).
- Blind, anonymous-first candidate evaluation — no personal data ever reaches a scoring model.
- Continuous dependency, secret and static-analysis scanning gating every deployment.
Verified employers
Every employer verifies before posting a public job. What the badge means.
See the criteriaHow scoring works
How assessments are generated, scored and monitored, including their limits.
Read the methodologyRequest our security questionnaire
Evaluating CalHire for your organisation? Tell us which questionnaire or document you need, and our security team will respond with it, along with current certification status and timelines.