BambooHR
Certifications & attestations
| Certification | Status | Source | Last verified |
|---|---|---|---|
| SOC 1 Type II Annual third-party SOC I audit (security page wording: 'Annual third-party SOC I & II security audit'). | Verified | vendor source ↗ | June 10, 2026 |
| SOC 2 Type II SOC 2 Type 2 report available via BambooHR's SafeBase profile under NDA. | Verified | vendor source ↗ | June 10, 2026 |
→ Direct answer: Does BambooHR have SOC 2?
Subprocessors
Subprocessor extraction for BambooHR is pending.
Hosting & data residency
- Infrastructurenot yet recorded
- Data residencyCustomer data hosted in the US, Canada, or Ireland depending on customer location and applicable law; the Ireland data center serves EU/EEA/Swiss/UK requirements (per security page, 2026-06-10).
Trust documents & links
- Trust centernone found
- Security pagehttps://www.bamboohr.com/security
- DPAnot yet recorded
- Status pagenot yet recorded
Security incidents & disclosures
No incidents on record in the public sources we track, as of June 10, 2026. Absence of a record is not a guarantee — see methodology.
Change history
2026-06-10
Vendor added with a verified initial snapshot: SOC 1 and SOC 2 Type II confirmed against bamboohr.com/security (fetched 2026-06-10). No ISO certifications claimed on the page. Cloud provider not named publicly; hosting regions recorded as US/Canada/Ireland.