What is Kombo?
Kombo is a way to securely share data from your HRIS, putting you in control of what data is shared.
Industry leaders trust Kombo with their data
How Kombo connects your HRIS with your partner
Kombo is a tool used by your partner, and has implemented a connection process across leading HRIS. The one-time connection procedure takes an average of 10 minutes to complete — after setup, your HR data will be periodically shared with your partner.
Privacy and Security
HR data is sensitive, and no one should be able to access it without your explicit permission.
Kombo goes beyond industry standards to ensure your data is kept safe.
Data is stored regionally relevant to where your partner operates. All data is encrypted using industry-standard algorithms. At rest, data is encrypted using AES-256. In transit, data is encrypted using Transport Layer Security (TLS).
In addition to regular third-party security audits, Kombo continually focuses on staying certified in internationally recognized standards.
Kombo is ISO 27001 certified, SOC 2 Type || audited and GDPR compliant.
Some employee data will be required for the service of your partner to function. For example, a spend management service will require access to bank account data (like IBAN) to enable automatic reimbursements.
Kombo empowers services to stay GDPR compliant by enabling them to limit data access to only what's necessary for their functionality. The legal basis of the exchange of data is always the contract between you and the service.
When connecting your HRIS via Kombo, you are able to set filters that define which employees will be read. Only employees matching these filters will be exposed to your partner.
Further Questions?
If you have any other questions, don’t hesitate to reach out to Kombo directly or visit the security center.
FAQs
Connecting your HRIS with your partner’s service enables your partner to provide functionality to you based on real-time data updates, such as off-boarding automations, or automated employee-benefit provisioning.
Such functionality is not possible with manual data transfers, as having always-up-to-date data is paramount to the value which the service is providing.
Building a robust integration to HRIS tools can quickly become a time-consuming task. For products requiring connections to multiple different systems, supporting all of these in-house is often not feasible. Therefore many companies choose Kombo to benefit from the enhanced security, reliability, and feature set.
Data is strictly shared between you and the partner who prompted you to connect via Kombo. The initial connection is authenticated between your HRIS and Kombo in the above-explained connection flow. After the connection is set up, the only one able to access your data is your partner, using authenticated requests to Kombo.
If you choose to terminate your API connection, Kombo will not receive any further data updates. Kombo is not in control of how data is stored by your partner, but your partner will cease to receive any updated data once the connection has been terminated.