Snapshot 212134
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Portal Start your security review View & download sensitive information Overview At ICIMS, protecting our customers' talent data is central to how we build and operate the ICIMS Talent Cloud. Our security program follows a defense-in-depth model. It applies layered controls across our products, corporate environment, employees, vendors and partners, so that no single control is the only safeguard for customer data. Independent audits and certifications validate the program. These include ISO/IEC 27001:2022 and ISO/IEC 27701, SOC 2 Type 2, and SOC 3 reports, CSA STAR Level 1 and TX-RAMP. Our privacy program aligns with GDPR, CCPA/CPRA, the EU-US and Swiss-US Data Privacy Frameworks, APEC PRP and TRUSTe. We also publish third-party risk ratings and completed self-assessments (CAIQ, SIG and SIG Lite) to support your due diligence. Customer data is protected with AES-256 encryption at rest, using per-customer keys managed through AWS Key Management Service. Data in transit is protected with TLS 1.2 or higher. Our platform runs on leading cloud infrastructure (AWS and Azure) and is built for high availability. It includes network segmentation, DDoS mitigation, redundant components, daily backups to a separate disaster recovery site, and a tested disaster recovery plan. Access to the platform is governed by role-based access control, audit logging, and SAML 2.0 single sign-on and multi-factor authentication options. Security is built into our software development lifecycle. Our teams follow secure coding standards and receive regular training. Automated code analysis and vulnerability management run throughout development, and patches are tested and approved before release. We commission annual third-party penetration tests across our products and make the attestation letters available to customers. Internally, we protect our workforce environment with full-disk encryption, endpoint detection and response, mobile device management and secure baseline configurations. All employees and contractors complete security and privacy training at onboarding and annually. Our governance extends to our suppliers and our use of AI. We maintain a vendor risk management program covering subprocessors, with Standard Contractual Clauses in place, and we publish our current subprocessor list. For AI-enabled capabilities, our cross-functional Responsible AI Committee governs the program in line with the NIST AI Risk Management Framework. It oversees ongoing bias monitoring and publishes bias audit summaries and AI transparency reports. This Trust Center gives you our audit reports, certifications, policies, architecture documentation and other security resources in one place. If you have a question that these materials do not answer, or you want to report a potential vulnerability, please contact us through the links on this page. Certifications and Compliance APEC PRP CCPA CPRA CSA STAR Level 1 EU-US DPF GDPR ISO/IEC 27001 SoA ISO/IEC 27001:2022 ISO/IEC 27701 Microsoft SSPA SOC 2 Type 2 SOC 3 Swiss-US DPF TRUSTe TX-RAMP EcoVadis JAN 2025 - Committed Documents DOCUMENTSAmazon Web Services SOC 1 Report DOCUMENTSAmazon Web Services SOC 2 Report DOCUMENTSAWS SOC Continued Operations Letter DOCUMENTSThird Party Findings Letter (BitSight) REPORTSSecurity Architecture Diagram CERTIFICATIONS AND COMPLIANCECSA STAR Level 1 CERTIFICATIONS AND COMPLIANCEISO/IEC 27001 SoA CERTIFICATIONS AND COMPLIANCEISO/IEC 27001:2022 CERTIFICATIONS AND COMPLIANCEISO/IEC 27701 CERTIFICATIONS AND COMPLIANCESOC 2 Type 2 CERTIFICATIONS AND COMPLIANCESOC 3 CERTIFICATIONS AND COMPLIANCETRUSTe Risk Profile Data Access Level Impact Level Recovery Time Objective View more Product Security Audit Logging Continuous Integration/Continuous Deployment Data Security View more Reports HIPAA Report Security Architecture Diagram Self-Assessments CAIQ SIG SIG Lite Data Security Access Monitoring Data Backups Data Erasure View more App Security Application Penetration Testing Code Analysis Patch Management View more AI AI Bias Audit AI Monitoring AI Risk Management View more Legal Sub-Processors Certificate of Insurance Data Processing Addendum View more Privacy Additional Resources Cookies Data Breach Notifications View more ESG Anti-Bribery and Corruption Anti-Competitive Practices Anti-Modern Slavery View more Regulatory Compliance iCIMS Code of Conduct iCIMS Integrity Helpline iCIMS Modern Slavery Statement View more Accessibility iCIMS Accessibility Statement iCIMS ATS Candidate Portal VPAT 2.4 SkillSurvey VPAT 2.5 View more Access Control Data Access Logging Password Security Infrastructure BC/DR DDoS Protection Network Segmentation View more Endpoint Security Disk Encryption Endpoint Detection & Response Mobile Device Management View more Network Security Data Loss Prevention Firewall IDS View more Policies Acceptable Use Policy Access Control Policy Anti-Malicious Software Policy View more Security Grades SecurityScorecard iCIMS BitSight iCIMS, Inc 790 CyberVadis iCIMS, Inc 972 View more Risk Management Supply Chain Risk Management BC/DR Alternate Processing/Storage Site Disaster Recovery Plan (DRP) Disaster Recovery Testing Training Employee Privacy Training Phishing Training Secure Development Training View more Trust Center Portal Updates iCIMS 2025 ISO Certifications Compliance The iCIMS 2025 ISO 27001 and 27701 certifications are available on the iCIMS Trust Center. If you think you may have discovered a vulnerability, please send us a note. Report issue