Security / trust page — found from the homepage — Humaans

Cited by

Facts read from this source

• Region Report an error

  “Humaans infrastructure is hosted on servers in the European Union.”

• Provider Report an error

  “All data is stored in Google Cloud Platform”

• Provider certifications Report an error

  “Our data center provider Google Cloud Platform maintains multiple certifications, including SOC 1, SOC 2, SOC 3 and ISO27001.”

• SOC 2 Report an error

  “SOC2 Type 2 certified”

• SOC 2 report availability Report an error

  “Our SOC2 Type 2 report is available for download in our Trust Center.”

• ISO 27001 Report an error

  “We proudly maintain an ISO27001:2022 certification, validating the robustness of our security processes and controls.”

• ISO 27001 download Report an error

  “You can download our ISO27001 certification in our Trust Center.”

• GDPR Report an error

  “Humaans is fully committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.”

• DPA Report an error

  “we maintain a Data Processing Agreement with every customer”

• Encryption in transit Report an error

  “We use 256-bit TLS.1.3 encryption, utilising both the ECDSA and RSA algorithms.”

• Encryption at rest Report an error

  “All data is stored in Google Cloud Platform and is automatically encrypted at rest using AES256 encryption, with Google managing the encryption keys.”

• Application level encryption Report an error

  “we also utilise application-level encryption in our database (AES256)”

• Penetration testing Report an error

  “We partner with world leading security providers to perform regular security penetration testing of our systems and platform.”

• Penetration test attestation Report an error

  “You can download our Letter of Attestation in our Trust Center.”

• Breach disclosure Report an error

  “In the event of a data breach involving personal data, we will promptly report to the local authority and to the people (data subjects) involved.”

• Credit card storage Report an error

  “Humaans does not store any credit card information. We have partnered with Stripe for credit card processing”

• SSO providers Report an error

  “Humaans supports Single Sign-On via Google Workspace, Microsoft Entra, and SAML 2.0 providers, allowing you to eliminate passwords entirely for employee access.”

• Role based access control Report an error

  “Configure granular controls down to individual data fields”

• AI permission filtering Report an error

  “We implement strict context filtering computed based on your platform permissions to prevent prompt injection attacks and ensure AI interactions remain within authorized boundaries.”

• Audit logs Report an error

  “Our audit logs are immutable, searchable, and retained according to industry best practices.”

• Audit log metadata Report an error

  “logged with detailed metadata including who performed the action, what was changed, when it occurred, and from where”

• Employee data access audited Report an error

  “they’re led through an auditing access path that requires them to state the valid consent or justification for the specific access session.”

• Daily backups Report an error

  “We run automated backups of our databases every day to ensure your data stays safe and highly available.”

• Hsts Report an error

  “Our application forces all requests over HTTPS, ensuring all traffic is secured in transit and protecting against protocol downgrade attacks.”

• Security headers Report an error

  “Our application uses a series of security headers, including X-Frame-Options, X-XSS-Protection and Content-Security-Policy to mitigate a wide range of common security issues.”

• Automated tests Report an error

  “We run an extensive suite of automated tests after each code change to verify correctness of Humaans features, including authentication and the permission system.”

• Vulnerability monitoring Report an error

  “We have automated systems in place that monitor the versions and vulnerabilities in all of the code that powers Humaans and our infrastructure is continuously updated to the latest and most secure versions of software.”

• Vulnerability reporting Report an error

  “If you believe you have discovered a vulnerability in Humaans product or have a security incident to report, please contact security@humaans.io.”

• Entity Report an error

  “Humaans Inc. © 2026”

• Log collection Report an error

  “We collect detailed logs to ensure we have a high-resolution trail of the actions performed across the platform for any incident investigation if so required.”

• Data processing law compliance Report an error

  “Humaans will comply with all applicable Data Protection Laws in the Processing of Company Personal Data and not Process Company Personal Data other than on the relevant Company’s documented instructions.”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Digital personnel file & data model
• The Data Protection Officer Employee data protection & co-determination
• The IT Integrator Digital personnel file & data model
• The IT Integrator Employee data protection & co-determination
• The Payroll Officer Digital personnel file & data model
• The Payroll Officer Employee data protection & co-determination
• The People Lead Digital personnel file & data model
• The People Lead Employee data protection & co-determination
• The Skeptic Digital personnel file & data model
• The Skeptic Employee data protection & co-determination
• The Works Council Advocate Digital personnel file & data model
• The Works Council Advocate Employee data protection & co-determination