Protecting your people, your data, and your peace of mind

Bob’s AI was designed with strict retention and data isolation policies, opt-out control, and role-based access—so your data stays private, secure, and in your hands.

Our guiding privacy and security principles

Zero-retention policy

Our customers’ data is not stored outside of the HiBob environment and is not used to train the third-party publicly accessible generative AI models

  • Customer data sent to AI providers is not stored or logged—ever.
  • Data is processed strictly for the purpose of generating a response.
  • No data is used to train AI models.

Data isolation and segregation

Your data doesn’t mingle with anyone else’s, so every AI output is uniquely yours and tailored to your organization.

  • AI interactions are tied to unique customer identifiers.
  • Your data isn’t combined or shared with other customers.
  • Each organization’s data is logically isolated within the system to maintain confidentiality.

Opt-out control for AI features

You decide where and when AI is used in the platform, so it always aligns with your data policies and comfort level.

  • AI usage is transparent and configurable at the feature level.
  • Admins can selectively disable or enable features through the AI Settings page.
  • Each AI feature includes a full description of its functionality.

Encryption at every step

Encrypted in transit and at rest – so your data is automatically protected without extra effort.

  • AI-related data is encrypted using industry-standard protocols.
  • HiBob follows industry best practices, including ISO 27001, ISO27018, ISO42001, HIPAA, GDPR, SOC2 type 2, and SOC1 type 2.
  • End-to-end encryption ensures protection from input to output.

Role-based access controls

Only the right people can use or configure AI tools, so you maintain full control over how AI is managed.

  • Access to AI settings and usage is permissioned by user role.
  • Admins can restrict access to specific features or data sharing between modules.

Vendor due diligence and transparency

We vet every provider – so you benefit from trusted partnerships, without needing to investigate yourself.

  • HiBob conducts comprehensive security assessments of all AI vendors.
  • Only pre-approved vendors appear in the approved Sub-Processors list.