Is Personio safe with your data?

Personio

Personio SE

68/100

Good disclosure · high confidence

Personio earns a B (68/100) because it discloses most of its data practices.

#13

of 216 apps ranked

score · HR & recruiting avg 47

+21

vs category average

Grade scaleA · 70–100B · 60–69C · 48–59D · 35–47F · 0–34

Personio's AI terms state plainly that customer data, inputs and outputs are not used to train models, that admins can switch AI features off, and that customers keep rights in their inputs and outputs, while the wider privacy notice leans on GDPR language without naming specific security controls or an advertising-sale position.

What Personio's privacy policy and terms of service say about your data

No model training on customer data

The AI Features terms state that Personio does not use the customer's Data, Input, or Output to train or improve AI models, and extend that commitment to the third-party AI providers behind the features.

AI can be switched off, and outputs stay the customer's

Admins can enable, disable, or turn off any AI feature or all AI credit consumption at any time in the admin settings, and the customer keeps all rights in its input while Personio claims no ownership of output.

Security controls are described only in the abstract

The processing addendum promises technical and organisational measures at an "appropriate level of security" and breach notice "without undue delay", naming no encryption standard, access control or notification deadline.

Nothing on advertising sales, and only generic rights language

The policy never states that it does not sell or share personal data for advertising, and it restates access, erasure, portability and rectification as bare GDPR entitlements rather than describing how each is delivered.

What the policy is silent or vague on

Not stated: whether training use differs by plan
Not stated: shorter retention for AI conversation logs
Not stated: whether it sells or shares data for advertising
Only partial: a right to access your data

Personio privacy rating

Training-data use3 of 4 disclosed

Keeps user inputs out of model training, or makes training opt-inDisclosed

Names a way to opt out of or into trainingDisclosed

Says whether training use differs by plan or tierSilent

Lets the user keep ownership of generated outputsDisclosed

Data-subject rights1 of 5 disclosed

Grants a right to access your dataPartial

Grants a right to delete your dataPartial

Offers data portability in a usable formatPartial

Grants a right to correct your dataPartial

Grants a way to object to or opt out of processingDisclosed

Retention and deletion1 of 4 disclosed

States a retention period for your dataPartial

States a deletion timeline after closure or requestDisclosed

Sets a shorter retention for AI conversation logsSilent

Commits to collecting only the data it needsPartial

Third-party sharing3 of 5 disclosed

Lists the categories of third parties it shares withDisclosed

References a sub-processor list or data processing agreementDisclosed

Does not sell or share data for advertising, or offers opt-outSilent

Names a safeguard for international data transfersDisclosed

States a standard for government and law-enforcement accessPartial

Transparency4 of 4 disclosed

Discloses that you are interacting with AIDisclosed

Marks AI-generated or synthetic outputNot applicable

Enumerates the categories of data it collectsDisclosed

Maps processing purposes to legal basesDisclosed

Is versioned and dated, with change noticeDisclosed

Sensitive data and children2 of 3 disclosed

Discloses automated decisions and a human-review pathPartial

Limits the use of special-category dataDisclosed

Governs biometric data specificallyNot applicable

States protections for children's dataDisclosed

Security and accountability1 of 3 disclosed

Describes its security safeguardsPartial

Commits to breach notificationPartial

Names a certification or a privacy contactDisclosed

DisclosedPartialSilentAdverseNot applicable

Details

Category: HR & recruiting
Modalities: text
Processes biometrics: No
Policy last updated: 2025-10
Region scored: Global / US-default
Last assessed: 2026-10-13

Documents examined

Other hr & recruiting apps

Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.