Snapshot 251772
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Employment Hero is an all-in-one HR, payroll, and benefits platform that helps businesses manage and support their people with confidence. Security and privacy are fundamental to how we build and operate our platform. We are committed to protecting customer data through secure design, strong access controls, encryption, and resilient cloud infrastructure hosted on Amazon Web Services. Use this page to learn more about our security posture and request access to our detailed security documentation. Compliance SOC 2 A Australian Privacy Act ISO/IEC 42001:2023 ISO 27001:2022 ISO 27701 ISO 27017 ISO 27018 GDPR Resources View all Compliance ISO Certificate 27001, 27017 and 27018 ISO Certificate 27701 SOC 2 Type II Report (1 Sep 2025 to 31 Aug 2026) ISO Certificate 42001 Insurance CoC (Certificate of Currency) Financial Institution Professional Indemnity Insurance Certificate of Currency Information Technology Insurance Certificate of Currency Penetration Testing [Sanitised] HR - EmploymentHero - Pentest - 2026.pdf [Sanitised] Payroll - EmploymentHero - Pentest - 2026.pdf [Sanitised] EHWork - EmploymentHero - Pentest - 2026.pdf Policies Acceptable Use Policy (Sanitised) Access Control Policy (Sanitised) Asset Management Policy (Sanitised) Business Continuity Plan (Sanitised) View 16 more Other resources ATO Digital Service Provider - Letter of Confirmation Updates View all Compliance Employment Hero Releases Its Latest SOC 2 Report Published October 19, 2026 Employment Hero is pleased to announce the completion of our latest SOC 2 examination, covering the period from September 1, 2025 to August 31, 2026. The report provides an independent assessment of the controls relevant to the security, availability, and confidentiality of our systems and services. It reflects our ongoing commitment to protecting customer information and maintaining strong operational practices. Our SOC 2 program is part of our broader investment in security, privacy, and customer trust. Copies of the report are available upon execution of a Non-Disclosure Agreement (NDA). Please reach out to your Employment Hero representative to request access. Compliance Employment Hero Achieves ISO 42001 Certification Published October 19, 2026 Employment Hero is proud to announce that we have achieved ISO/IEC 42001 certification, the international standard for Artificial Intelligence Management Systems (AIMS). This certification recognises our structured approach to managing AI responsibly. It covers how we govern AI systems across their lifecycle, including their development, implementation, use, and ongoing monitoring. Achieving ISO 42001 reflects our commitment to the responsible use of AI, supported by clear governance, risk management, and oversight. It complements our existing focus on information security and privacy, and helps reinforce customer trust as we continue to develop and use AI-enabled products. Copies of the certification are available for download upon execution of a Non-Disclosure Agreement (NDA). Please reach out to your Employment Hero representative to request access. Compliance Employment Hero Achieves ISO 27001 Recertification and ISO 27701 Certification Published August 7, 2026 Employment Hero is proud to announce the successful completion of our ISO 27001 recertification and the achievement of ISO 27701 certification. Employment Hero operates an Information Security Management System (ISMS) that conforms to the requirements of ISO/IEC 27001:2022, with additional conformance to ISO/IEC 27017:2015 (cloud security controls) and ISO/IEC 27018:2019 (protection of personally identifiable information in public clouds). The scope of certification encompasses the centrally managed ISMS and Privacy Information Management System (PIMS) governing Employment Hero's suite of products. This includes the design, development, implementation, and support of its products, ensuring compliance with information security and privacy requirements. The organisation operates as both a Data Processor and Data Controller. Our ISO 27701 certification further extends this framework to privacy information management, reinforcing our commitment to the responsible handling of personal data in line with global privacy requirements. These certifications reflect Employment Hero's ongoing investment in security, privacy, and customer trust. Copies of these certifications are available for download upon execution of a Non-Disclosure Agreement (NDA). Please reach out to your Employment Hero representative to request access. Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all Abnormal Security • Security European Union Processing Activity: Threat detection by scanning inbound emails for suspicious activity, phishing, or malware through content and metadata analysis via APIs. GDPR Transfer Mechanism: Adequacy Decision Abstract API • Document management USA Processing Activity: Identification of geolocation data to enhance location-based services and user experiences. GDPR Transfer Mechanism: Standard Contractual Clauses Affinda • Data analytics USA Processing Activity: User onboarding, engagement, and product experience optimisation through in-app messaging and tutorials. GDPR Transfer Mechanism: Standard Contractual Clauses Airtable • Collaboration Canada Processing Activity: Collaborative management of structured business data in a cloud database that we sync. GDPR Transfer Mechanism: Adequacy Decision Controls View all Infrastructure security Asset disposal procedures utilized Data retention procedures established Production inventory maintained View 228 more Infrastructure security controls Organizational security Return of assets Product security Asset disposal procedures utilized Data retention procedures established Production inventory maintained View 8 more Product security controls Internal security procedures Information backup Understanding the organization and its context Data and privacy Asset disposal procedures utilized Data retention procedures established Production inventory maintained View 8 more Data and privacy controls FAQ View all Media View all Lindsay | Local Stories | The Housing Finance Corporation x Employment Hero Opens in new tab Lindsay had seen her fair share of HR systems in previous roles. Some clunky, some limited, none that really did it all. Enter Employment Hero. Lindsay shares how the platform brought everything together, from performance reviews to compliance training, and why the intuitive design made all the difference. Mobile app? A game-changer. Expense claims while on the go? Easy. Now the THFC team has one place to manage time off, give recognition and keep things moving. No more delays, no more “I forgot to do that.” How Carrie met Sally | Employment Hero Opens in new tab Time to find your Sally, with Employment Hero: https://employmenthero.com/ Local stories | Tasmanian Oyster Co. x Employment Hero Opens in new tab 'Everything is so much simpler with Employment Hero'. Curious to learn more about how Employment Hero has transformed Tasmanian Oyster Company's HR and payroll processes so they can focus back on doing what they do best?