HiBob takes AI data privacy seriously. We have strict privacy and security policies to ensure your data remains secure, all while providing best-in-class AI generative tools.
✏️ Disclaimer: This article does not contain official legal guidance or advice. As global AI regulations continue to evolve, it is recommended to regularly review applicable local regulations and legislation.
HiBob integrates artificial intelligence (AI) technologies to optimize HR operations while maintaining a strong commitment to privacy, security, and regulatory compliance. Our AI-powered features are designed to support HR professionals by providing insights, automating tasks, and enhancing overall efficiency and productivity. However, customer control remains paramount, ensuring transparency and security in every interaction with AI within the HiBob platform.
HiBob's AI functionalities are powered by third-party providers such as OpenAI. To ensure responsible AI usage, we implement a zero-retention policy, meaning that customer data is never stored, used for AI training, or shared beyond the scope of its intended use by our third-party service providers. Additionally, all AI functionalities can be turned off or on at any time in System Settings, allowing customers to control the activation of AI tools based on their specific needs.
For more information, see Getting started with AI in Bob.
For more information on our privacy and security policies, see HiBob's Trust Center.
How does Bob AI work?
Bob AI's functionalities are tailored to enhance various HR processes. These features are powered by third-party APIs, which enable Bob to understand, process, and generate human-like text based on your inputs. The API processes input data and returns results, which are presented to you in Bob.
To use Bob AI tools, you can opt-in or out through your System Settings, where you can see details of the features, ensuring that you retain full control over your AI-powered experiences. To learn more, see Getting started with AI in Bob.
Final decisions and control will always rest with you. Bob AI tools can't make decisions for you. It can only streamline your decision-making processes by providing insights and suggestions, and by automating certain tasks based on the data you provide.
What data does Bob AI use?
Bob AI processes the specific data you input into Bob to generate the outputs you see.
And the data that Bob AI processes for any given user is protected by role-based access control (RBAC). This means it is confined to the data that the user can view, as defined per their permissions.
So if a user does not have access to certain data, they will not be shown it in any information provided by Bob AI. For example, if a user asks "What is the CEO's salary?" and does not have permission to view that data, Bob, the AI, will not provide the information.
Each customer has a unique identifier for all AI-related activities, ensuring complete data separation between individual customers. Your data isn't shared and doesn't contribute in any way to our other customers' use.
How does Bob AI keep my data secure?
HiBob upholds the highest security standards to safeguard customer data while using AI. Any data potentially processed by our AI is handled according to our strict privacy policy and security practices, and HiBob implements industry best practices to ensure your information remains secure, while still leveraging AI capabilities. This includes:
- Data protection and retention policy
- HiBob enforces a strict zero-retention policy for AI interactions, ensuring that customer data is not stored by third-party AI providers.
- Data input into AI-powered functionalities is used solely for the requested purpose and is not leveraged for AI training or external data analysis.
- Data segregation and isolation
- AI interactions are customer-specific, with unique identifiers ensuring complete data separation between different clients.
- AI does not aggregate, combine, or cross-reference data across multiple customers
- Encryption and secure processing
- All AI-related data transfers are encrypted both in transit and at rest to prevent unauthorized access.
- HiBob follows industry best practices, including ISO 27001, ISO27018, ISO42001, HIPAA, SOC2 type 2, and SOC1 type 2, for data security.
- Access controls and monitoring
- AI functionalities are restricted by role-based access controls, ensuring that only authorized personnel can enable or interact with AI tools.
- AI-related actions are logged for security and compliance monitoring.
- Third-party vendor risk management
- HiBob conducts rigorous security assessments of all third-party AI providers before integration.
AI vendors used by HiBob are listed on our Subsidiaries and sub-processors page, allowing customers to review our authorized AI service providers.
Does Bob AI train models?
No, HiBob does not train any AI models. All AI features are based on models trained by third-party providers, such as OpenAI. No customer data is used to train AI models.
HiBob has a strict Zero-Retention policy for its AI offerings. Customer data isn't stored outside the Bob environment by our third-party AI service providers. Third parties can't store your data or use it in any way, including to train third-party publicly accessible generative AI models (LLMs). The third parties providing our AI capabilities can only use your data to produce the outputs you see in Bob.
Our commitment to responsible and ethical AI
HiBob is dedicated to the responsible and ethical use of AI in HR applications. Our AI-powered functionalities are designed to enhance efficiency while upholding transparency, fairness, and security. We prioritize customer control, ensuring that AI remains a tool for assistance, not automation of critical HR decisions.
HiBob continuously monitors AI developments and regulatory changes to ensure our AI capabilities evolve in a compliant and responsible manner.
For FAQ’s & more information on the above, refer to our help center article.