What is Kombo?

Kombo is a way to securely share data from your HRIS, putting you in control of what data is shared.

Industry leaders trust Kombo with their data
Kombo logoKombo logoKombo logoKombo logo

Privacy and Security

HR data is sensitive, and no one should be able to access it without your explicit permission.
Kombo goes beyond industry standards to ensure your data is kept safe.

Security Infrastructure

Data is stored regionally relevant to where your partner operates. All data is encrypted using industry-standard algorithms. At rest, data is encrypted using AES-256. In transit, data is encrypted using Transport Layer Security (TLS).

Certification

In addition to regular third-party security audits, Kombo continually focuses on staying certified in internationally recognized standards.

Kombo is ISO 27001 certified, SOC 2 Type || audited and GDPR compliant.

Why do you require employee data?

Some employee data will be required for the service of your partner to function. For example, a spend management service will require access to bank account data (like IBAN) to enable automatic reimbursements.

Kombo empowers services to stay GDPR compliant by enabling them to limit data access to only what's necessary for their functionality. The legal basis of the exchange of data is always the contract between you and the service.

What if not all employees are relevant to the service?

When connecting your HRIS via Kombo, you are able to set filters that define which employees will be read. Only employees matching these filters will be exposed to your partner.

Further Questions?

If you have any other questions, don’t hesitate to reach out to Kombo directly or visit the security center.

Trusted by the world’s leading B2B companies

FAQs

Why should I connect my HRIS to another service?

Connecting your HRIS with your partner’s service enables your partner to provide functionality to you based on real-time data updates, such as off-boarding automations, or automated employee-benefit provisioning.

Such functionality is not possible with manual data transfers, as having always-up-to-date data is paramount to the value which the service is providing.

Why do companies rely on Kombo to power their services?

Building a robust integration to HRIS tools can quickly become a time-consuming task. For products requiring connections to multiple different systems, supporting all of these in-house is often not feasible. Therefore many companies choose Kombo to benefit from the enhanced security, reliability, and feature set.

Who has access to my data?

Data is strictly shared between you and the partner who prompted you to connect via Kombo. The initial connection is authenticated between your HRIS and Kombo in the above-explained connection flow. After the connection is set up, the only one able to access your data is your partner, using authenticated requests to Kombo.

What happens to my data if we terminate the connection?

If you choose to terminate your API connection, Kombo will not receive any further data updates. Kombo is not in control of how data is stored by your partner, but your partner will cease to receive any updated data once the connection has been terminated.