Trust Center
Recruiting and HR data is critical to your business and we take the security of customer data extremely seriously. Please use this Trust Center to learn more about security posture and request access to more security information.
Documents
Network Security
Network Security
We protect our corporate network against external & internal threats.
Incident Response
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Change Management
Change Management
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
Physical & Environment
Physical & Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
- Can they attribute that data to a specific user or Company?
- Do individual users have the option to opt-out of data collection?
- Are independent audit and assurance assessments conducted according to relevant standards at least annually?
- Can you provide SOC2 Report, Pentest, etc.?
- Do we have access to logs of prompts submitted by our employees? Does it show when it ingest our data?
Lemonade
Sequoia
Reddit
Ramp
Deel
Retool
Vanta
NotionSubprocessor Updates
Ashby is adding the following subprocessor:
Braintrust
Purpose: AI Observability & Evaluation
Please see here for a full list and details: https://trust.ashbyhq.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57&source=click
The Ashby Security Team
Ashby is adding the following subprocessors:
Polytomic
Purpose: ETL
Plain
Purpose: Customer Support
Seon
Purpose: Optional Candidate Fraud Signal Functionality
Assembly AI
Purpose: Optional AI Notetaker Add-on
Recall AI
Purpose: Optional AI Notetaker Add-on
Please see here for a full list and details: https://trust.ashbyhq.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57&source=click
The Ashby Security Team
Terms
Ashby has updated our Terms for AI Features to support new AI features.
Please follow the link above to review the updates in their entirety. For clarity, we have made the following updates:
- Confirmed and clarified that Ashby Customers retain ownership for all outputs from AI Tools.
- Introduced terms that will apply to Ashby’s AI Notetaker that is being released this Thursday 9/25.
Questions? Please reach out to the Ashby Support Team at support@ashbyhq.com
Ashby
New SOC1/SOC2 reports added
SOC1 and SOC2 Type II reports for the Audit period 08/01/2024 - 11/30/2024 have been added. Going forward, our Audit period is going to be 12/01 - 11/30.