greenhouse.com
B
74 of 100
Enterprise AI readiness, from public pages only
Scanned 2026-11-01 from 65 public pages. Methodology 1.0. Category: HR.
| Identity | 11 of 16 | |
| Assurance | 24 of 25 | |
| Data and AI terms | 19.5 of 26 | |
| Deployment | 0 of 6 | |
| Agent readiness | 12 of 17 |
Trend and peers iHow the score moved over the last scans, how it compares with other scored companies in the same market category, and what about the last scan means the score may still move. Everything comes from public pages.
One graded scan so far. The trend shows after the next one.
Peers
Not enough scored companies in this category yet (2 so far, 5 needed).
Likely to change iWhat about the last scan means the score may still move: checks that could not be read, findings waiting for review, an old scan, an older methodology, or a scan that hit its page limit. These describe the scan, not the company.
- 4 findings are waiting for staff review.
Identity
SAML or OIDC single sign-on (10 points) Partly found
Product security features - Single sign-on, SCIM user provisioning, audit log API, permissions approvals
source
SCIM provisioning (6 points) Found
Produktsicherheitsfunktionen: Single Sign-on, SCIM-Benutzerbereitstellung, Audit-Log-API, Genehmigung von Berechtigungen
source
Roles and permissions (4 points) Under review
Assurance
SOC 2 Type 2 (10 points) Found
ISO 27001 (4 points) Found
Greenhouse Software- ISO 27001 & 27701 Certificate
source
Trust center (5 points) Found
Contact: security@greenhouse.io
source
security.txt (2 points) Partly found
Contact: security@greenhouse.io
source
Bug bounty or disclosure program (2 points) Found
Data and AI terms
No training on customer data (8 points) Found
Greenhouse does not use personal data from customers to train internal LLMs, proprietary models or third-party models.
source
Retention periods (5 points) Partly found
All personal data in Controller's account is automatically deleted ninety (90) days following expiration or termination of the services agreement, or earlier upon Controller request, subject to Greenhouse's standard 30-day backup schedule.
source
Subprocessor list (5 points) Found
Data processing agreement (4 points) Found
Will enter into a DPA
sourceData processing addendum
sourceIf your company has a Greenhouse subscription, the Greenhouse Data processing addendum (DPA) is the agreement describing the respective data processing responsibilities and obligations of the parties including Greenhouse's data protection and privacy commitments as a processor on your company's
source
Data residency (4 points) Not found in public pages
Pages searched (20)
https://www.greenhouse.com/.well-known/security.txthttps://www.greenhouse.com/securityhttps://www.greenhouse.com/pricinghttps://www.greenhouse.com/enterprisehttps://trust.greenhouse.com/https://www.greenhouse.com/legalhttps://www.greenhouse.com/privacy-policyhttps://www.greenhouse.com/sourcinghttps://www.greenhouse.com/guidance/ta-guide-to-legal-securityhttps://www.greenhouse.com/customer-stories/adyen-doubles-its-workforce-without-compromising-quality-or-compliancehttps://www.greenhouse.com/uk/securityhttps://www.greenhouse.com/de/securityhttps://www.greenhouse.com/uk/events/balancing-ai-innovation-while-navigating-ai-regulation-and-compliancehttps://www.greenhouse.com/de/events/balancing-ai-innovation-while-navigating-ai-regulation-and-compliancehttps://www.greenhouse.com/events/balancing-ai-innovation-while-navigating-ai-regulation-and-compliancehttps://www.greenhouse.com/uk/events/hiring-with-ai-what-legal-and-security-need-you-to-knowhttps://www.greenhouse.com/de/events/hiring-with-ai-what-legal-and-security-need-you-to-knowhttps://www.greenhouse.com/events/hiring-with-ai-what-legal-and-security-need-you-to-knowhttps://www.greenhouse.com/uk/blog/building-trust-through-transparency-with-real-talenthttps://www.greenhouse.com/privacy-policy
Deployment
Private deployment (6 points) Not found in public pages
Pages searched (20)
https://www.greenhouse.com/https://www.greenhouse.com/.well-known/security.txthttps://www.greenhouse.com/securityhttps://www.greenhouse.com/pricinghttps://www.greenhouse.com/enterprisehttps://www.greenhouse.com/sourcinghttps://www.greenhouse.com/guidance/ta-guide-to-legal-securityhttps://www.greenhouse.com/customer-stories/adyen-doubles-its-workforce-without-compromising-quality-or-compliancehttps://www.greenhouse.com/uk/securityhttps://www.greenhouse.com/de/securityhttps://www.greenhouse.com/uk/events/balancing-ai-innovation-while-navigating-ai-regulation-and-compliancehttps://www.greenhouse.com/de/events/balancing-ai-innovation-while-navigating-ai-regulation-and-compliancehttps://www.greenhouse.com/events/balancing-ai-innovation-while-navigating-ai-regulation-and-compliancehttps://www.greenhouse.com/uk/events/hiring-with-ai-what-legal-and-security-need-you-to-knowhttps://www.greenhouse.com/de/events/hiring-with-ai-what-legal-and-security-need-you-to-knowhttps://www.greenhouse.com/events/hiring-with-ai-what-legal-and-security-need-you-to-knowhttps://www.greenhouse.com/uk/blog/building-trust-through-transparency-with-real-talenthttps://www.greenhouse.com/uk/enterprisehttps://www.greenhouse.com/de/enterprisehttps://www.greenhouse.com/uk/pricing
Customer-managed keys (4 points) Under review
Agent readiness
Official MCP server (6 points) Found
The Greenhouse MCP is a Model Context Protocol server that connects org-approved AI assistants such as Claude, Gemini, and Copilot directly to Greenhouse hiring data.
source
Controls on AI agent actions (4 points) Not found in public pages
Pages searched (20)
https://www.greenhouse.com/.well-known/security.txthttps://www.greenhouse.com/securityhttps://www.greenhouse.com/sourcinghttps://www.greenhouse.com/guidance/ta-guide-to-legal-securityhttps://www.greenhouse.com/customer-stories/adyen-doubles-its-workforce-without-compromising-quality-or-compliancehttps://www.greenhouse.com/uk/securityhttps://www.greenhouse.com/de/securityhttps://www.greenhouse.com/uk/events/balancing-ai-innovation-while-navigating-ai-regulation-and-compliancehttps://www.greenhouse.com/de/events/balancing-ai-innovation-while-navigating-ai-regulation-and-compliancehttps://www.greenhouse.com/events/balancing-ai-innovation-while-navigating-ai-regulation-and-compliancehttps://www.greenhouse.com/uk/events/hiring-with-ai-what-legal-and-security-need-you-to-knowhttps://www.greenhouse.com/de/events/hiring-with-ai-what-legal-and-security-need-you-to-knowhttps://www.greenhouse.com/events/hiring-with-ai-what-legal-and-security-need-you-to-knowhttps://www.greenhouse.com/uk/blog/building-trust-through-transparency-with-real-talenthttps://www.greenhouse.com/ai-principleshttps://www.greenhouse.com/uk/ai-principleshttps://www.greenhouse.com/de/ai-principleshttps://www.greenhouse.com/de/apihttps://www.greenhouse.com/de/blog/building-trust-through-transparency-with-real-talenthttps://www.greenhouse.com/blog/building-trust-through-transparency-with-real-talent
Audit log export (2 points) Partly found
AI use policy (2 points) Under review
Rate limits documented (not scored) Under review
Changelog
- 2026-11-01: 88 to 74 (rescan) Controls on AI agent actions: Could not check to Not found in public pages; Rate limits documented: Could not check to under review; Data residency: Could not check to Not found in public pages; Customer-managed keys: Could not check to under review; Private deployment: Could not check to Not found in public pages
- 2026-11-01: First score, 88
Scores older than an hour can be refreshed.