Security and privacy at Career Bird
SOC 2 Type II audited, with a GDPR-aligned data processing agreement. Controls, reports and policies are in our Trust Center.
Independently audited controls on an annual cycle. Request the report and see live control status in the Trust Center.
Request the reportCareer Bird is the processor, and you remain the controller. Data is hosted in the US, and transfers from the EU are covered by standard contractual clauses in our data processing agreement. Prighter acts as Career Bird’s EU representative under Article 27 of the GDPR.
Request the DPAHow Career Bird protects your data
Trust Center and policies
Common security questions
Can we see your SOC 2 report?
Yes, you can see Career Bird's SOC 2 report under NDA. The current Type II report and the live control status are available through Career Bird's trust center — ask your Career Bird contact, and we will send both.
Do you use our data to train AI models?
No, Career Bird does not use your data to train AI models. Career Bird does not use customer data to train models of its own and performs no fine-tuning on customer data. Inference runs on pre-trained OpenAI models configured for zero data retention, so the provider keeps neither the prompts nor the outputs. We may use aggregated, de-identified usage data to improve the platform, but we never share customer-specific information across customers.
Are you GDPR compliant?
For GDPR purposes, Career Bird acts as a processor and the clients remain the controller. A GDPR-aligned data processing agreement with standard contractual clauses is available, and a formal readiness program is running with outside counsel.
Send us your security questionnaire.
We will complete it and share the SOC 2 report and subprocessor list under NDA.