CEC RecruitAI Recruitment Platform
Security Certifications
Track ISO 27001, SOC 2, GDPR, and Zambian data protection compliance
ISO 27001 Information Security Management
ISO 27001
BodyBSI Group Zambia
ScopeAI recruitment platform, candidate data storage, interview processing, API endpoints
Issued2025-09-15
Expires2028-09-14
Last Audit2026-03-10
Next Audit2027-03-10
Surveillance audit passed. 2 minor non-conformities addressed (access control logging, vendor risk assessment updates).
⚠ All non-conformities closed
SOC 2 Type II Audit
SOC 2 Type II
BodyDeloitte Zambia
ScopeCandidate data processing, AI assessment engine, reporting and analytics
Last Audit2026-06-01
Next Audit2026-09-01
Fieldwork completed. Report generation in progress. Preliminary results show no exceptions.
⚠ Pending final report
Zambia Data Protection Act Compliance
PDPA Zambia
BodyZambia Information & Communications Technology Authority (ZICTA)
ScopePersonal data collection, processing, storage, and cross-border transfers of candidate data
Issued2025-11-20
Expires2027-11-19
Last Audit2026-04-15
Next Audit2027-04-15
Compliance confirmed. Data retention policies and consent management reviewed and approved.
⚠ No remediation required
GDPR Compliance Assessment
GDPR
BodyDLA Piper Africa
ScopeEU candidate data processing, right to erasure, data portability
Next Audit2026-10-01
Gap analysis in progress. Data subject access request workflows being implemented.
⚠ Implementing DSAR automation