Hireflix is now SOC 2 Type II certified 🎉
Hireflix has completed its SOC 2 Type II audit with zero exceptions. One more reason to trust the world's most user-friendly one-way video interview platform.
We have some big news to share: Hireflix has completed its SOC 2 Type II audit... with zero exceptions. 😊🙏
We became SOC 2 Type I compliant back in 2022, and now we have taken it a notch further.
What is the difference between Type I and Type II?
A Type I audit checks that a company's security controls are properly designed at a single point in time. A Type II audit goes much further: an independent auditor examines whether those controls actually operate effectively over a period of months, in the real world, day after day.
That is exactly what happened: the auditors spent months reviewing how we protect customer data... security, availability, confidentiality... and confirmed everything works exactly as it should. Not a single exception noted.
What this means for you
Nothing changes in your day-to-day: your interviews keep working like always. But if your security or procurement team ever needs formal proof of how seriously we take your data, documentation is available: we can share our SOC 2 attestation letter, as well as Sections 1 and 2 of the report, upon request as part of any security review.
What the audit actually covers
SOC 2 reports are built around the Trust Service Criteria defined by the AICPA. Security is the foundational criterion, the only one that is mandatory in every SOC 2 report, and the most comprehensive of all: it is where an independent auditor verified, over several months, how Hireflix protects candidate data and systems from unauthorized access... authentication, encryption, access controls, and incident response. Zero exceptions noted.
Security features built into Hireflix
The certification formalizes protections that are already part of our product:
- Single sign-on (SSO) for enterprise identity providers (Okta, Azure AD, OneLogin, and more)
- Encryption of candidate data and video in transit and at rest
- Automatic data deletion on your schedule, so candidate recordings don't linger longer than you need them to
- Access and usage logs, so your team has a full audit trail of who viewed what, and when
- GDPR-compliant data handling for candidates and hiring teams based in the EU
This is part of a bigger commitment: we keep working hard to make Hireflix the best one-way video interview platform in the world, and there is a lot coming in the next months. Stay tuned! 😊
Thanks for being with us! 🙏
FAQs
Is SOC 2 Type II different from ISO 27001?
They are different certifications, but both are extremely strong and heavily overlapping: both require an independent audit of how a company protects customer data. SOC 2 is the standard most widely recognized in North America (issued under AICPA standards), while ISO 27001 is its international counterpart. In practice, security teams treat them as broadly equivalent evidence of a mature security program.
Is Hireflix GDPR compliant?
Yes, Hireflix is fully GDPR compliant, in addition to being SOC 2 Type II certified.
Can I get proof of Hireflix's SOC 2 Type II certification?
Yes. Our attestation letter and Sections 1 and 2 of the report are available upon request. Just reach out to the Hireflix team at support@hireflix.com in the context of your security review and we'll send them over.
