Snapshot 251851
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Greenhouse Software Search the Trust Center... Ctrl +K Quick links Website URL Report a Vulnerability Quick links Website URL Report a Vulnerability Badges GDPR CCPA EU-US DPF UK-US DPF Swiss-US DPF Featured Documents Quick Summary One or more annual third-party audit(s) Has a formal mobile device management (MDM) program Annual third-party penetration testing Has a disaster recovery plan Subprocessors list available Has cyber insurance Will enter into a DPA Has a bug bounty or vulnerability disclosure program Has an API available Uses a centralized IAM solution (SSO) to manage employee access Has a status page Has a privacy policy Announcements Nov 2, 2026, 19:56 UTC Response to the Node2Shell vulnerability (CVE-2026-111497) We assessed our product infrastructure, remediated applications exposed to this vulnerability, and applied a web application firewall (WAF) rule to block exploitation attempts. We found no evidence of exploitation. Oct 22, 2026, 15:45 UTC Response to the PHP2Shell vulnerability (CVE-2026-109618 / CVE-2026-109619) We have assessed our product infrastructure and have found no exposure to this vulnerability. We maintain monitoring across our environment and have put additional detection and protective measures in place as a precaution. We are also working with relevant third-party vendors to confirm they are assessing and mitigating their own exposure. Jun 24, 2026, 12:55 UTC Response to Klue Third-Party Security Incident We were recently notified that Klue, a third-party vendor, experienced a security incident in which attackers obtained the credentials Klue used to connect to certain Greenhouse business systems. Based on our investigation to date, the unauthorized access occurred on June 11, 2026, was scoped to Klue's integration, and did not involve Greenhouse's own infrastructure. No Greenhouse product, hiring, or candidate data was affected. The data accessible was limited to business contact information held in our sales and customer relationship systems, specifically names and contact details, and our investigation has not identified any modification or deletion of data. We acted quickly to secure unauthorized access, notified the relevant data protection authorities, and are working directly with Klue as its investigation continues. Feb 26, 2026, 13:55 UTC Greenhouse achieves ISO 42001 Certification Responsible AI you can trust. Greenhouse is now ISO/IEC 42001:2023 certified, the global standard for Artificial Intelligence Management Systems (AIMS). This certification independently validates our commitment to developing AI with accountability, fairness, privacy, and security at its core. As AI adoption accelerates in hiring, so do expectations around oversight, accountability, and risk management. We are proud to provide customers with AI they can trust today and as regulatory expectations continue to evolve. Dec 17, 2025, 13:55 UTC Response to CVE-2025-55182 (React2Shell) Upon receiving a threat advisory on 12/03/2025 regarding CVE-2025-55182, Greenhouse immediately deployed a virtual patch to our WAF to mitigate risk while investigating impact. Although we confirmed the specific vulnerable features were not in use, we proactively upgraded and validated all affected dependencies to the vendor-recommended versions. We have completed deployment and retained our protective WAF rules to ensure ongoing security. Documents & Knowledge Base FAQs Subprocessors31 Subprocessor Location of Processing Usage Details Adobe United States E-signature service (Acrobat Sign) for Greenhouse Recruiting - upon enablement by customer Amplitude United States Product analytics for UX/UI analysis and in-app experiences Anthropic United States Service provider for hosting large language models. Uses include AI product features and internal operational support purposes AWS United States, Germany, Australia Server infrastructure and data hosting Cloudflare United States Email tracking and firewall services for Greenhouse Sourcing Automation Datadog United States Performance data; processing HTTP user request data Dropbox United States E-signature platform for Greenhouse Onboarding fastly.com United States Delivery of assets (images, documents, client-side source code) and firewall services Fivetran United States Delivery of data to data warehouse Forethought United States Customer chatbot Gainsight United States Customer success platform Glean United States Internal AI platform for enterprise search and knowledge discovery Google United States Protects job boards from spam and abuse for Greenhouse Recruiting Google Analytics United States Website Analytics Google Workspace United States Email processing Grayscale Labs United States Texting automation platform for Greenhouse Recruiting - upon enablement by customer IPQualityScore United States Provides signals and enrichment for fraud detection as part of the Real Talent fraud prevention feature for Greenhouse Recruiting Kombo United States HRIS integrations services - upon enablement by customer Mailgun United States Email Services for Greenhouse Recruiting MongoDB United States Datastore for Greenhouse Sourcing Automation OpenAI United States Service provider for hosting large language models. Uses include AI product features and internal operational support purposes Partner Fleet United States In-app integrations page for Greenhouse Recruiting - utilized when a Greenhouse user submits an integration partner demo request via the in-app integrations page Recall.ai United States Meeting recording and speech to text transcription services for Greenhouse Recruiting Rollbar United States Error reporting and tracking SendSafely United States Encrypted file transfers Skilljar United States Customer training platform for Greenhouse Recruiting - upon enablement by customer Snowflake United States Data warehouse for product analytics S Sublime Security United States Corporate email security solution Twilio United States Two-factor authentication and email delivery system Workato United States Enables faster integration development for general and custom Greenhouse integrations - upon enablement by customer Zendesk United States Customer support ticketing system Last updated October 27, 2026. . View as: Powered by Conveyor, the first end-to-end customer trust platform. Learn more