BambooHR

HR & People United States Website Reviewed Sept. 2, 2026

HR information system for small and mid-sized businesses: employee records, onboarding, time off, performance and reporting.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
SOC 2 Type II Independent third-party auditor BambooHR platform; report available to customers on request — — Current

Compliance Frameworks

SOC 2 Type 2
Full
GDPR 2016/679
Full
BambooHR acts as processor under its DPA; SCCs available for EU and UK transfers
ISO/IEC 27001:2022
In Progress
No public ISO 27001 certificate located - confirm current status with BambooHR

Assess BambooHR in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register