We Have Always Protected Your Data. Now It Is Independently Certified.

Kiku is now ISO 27001 certified. The certificate was issued in June 2026 after an independent audit by Prescient.

Client and candidate data has been a top priority since day one. Every conversation Sara has with an applicant belongs to the candidate and to the company they applied to. We have always treated it that way. Now an independent third party has checked how we work and confirmed it.

What ISO 27001 Means

ISO 27001 is the international standard for managing information security. It asks a company to identify its risks, put controls in place and prove those controls work.

What It Covers at Kiku

Who can access data. Every team member signs in through single sign-on with two-factor authentication. People only see what their role needs, and we review access every quarter.

Where data lives and how it is protected. All data is hosted in the EU on AWS in Ireland. Data is encrypted when stored and when it moves between systems. Each customer's data is kept separate.

Finding problems early. Automated scanning checks our systems for vulnerabilities. Vanta monitors our security controls continuously and alerts us when something drifts.

When something goes wrong. We have a documented incident response plan. If a breach affects your data, we notify you within 24 hours. Automated backups let us restore data to an earlier point in time.

The partners we rely on. We assess the risks of every vendor that touches customer data, and we keep an up-to-date list of subprocessors.

What It Means for You

You can ask us for our security documentation, and the answers are backed by an independent audit. For candidates, it means the information they share in an interview is handled with care at every step.

Certification is a starting point. ISO 27001 includes yearly surveillance audits, so our controls keep getting checked.

Questions about our security? Write to security@getkiku.com.