Our mission is to revolutionize talent acquisition through advanced, ethical, and transparent AI solutions. We recognize the importance of complying with regulations to ensure the highest standards of data privacy, security, and fairness. The Trust Center walks through our AI governance framework along with our commitment to compliance with:
These efforts underscore our dedication to protecting the information entrusted to us by our clients and users, fostering trust, and upholding the integrity of our AI systems.
Upwage complies with local AI regulations to ensure are products are available throughout the US. In New York, we follow Local Law 144 by conducting annual third-party bias audits and posting the results publicly. In Utah, we adhere to Senate Bill 149 by providing clear consumer disclosures at the start of AI interactions and upon request. For Colorado's Senate Bill 24-205, we implement thorough documentation, developer disclosures, and annual impact assessments.
Upwage complies with OFCCP and EEOC regulations by implementing measures to prevent discrimination in hiring. We conduct quarterly internal bias assessments and annual third-party audits to identify and mitigate biases in our AI models. Our AI products include EEOC compliance guardrails to avoid decisions based on protected attributes. Additionally, we anonymize candidate data to protect privacy and base assessments solely on qualifications and competencies.
Upwage complies with the CCPA and GDPR, ensuring transparency and user control over personal data. Our Privacy Policy and Terms & Conditions detail data collection, usage, and protection. We obtain explicit consent before collecting data and provide options for access, rectification, and erasure. Our data retention policies balance operational needs with privacy rights, and we use stringent access controls and encryption to safeguard personal data. We continuously monitor and update our practices to maintain compliance.
Upwage has obtained SOC 2 Type 1 certification to enhance our data security and compliance framework. This certification evaluates our system's controls for security, availability, and confidentiality, demonstrating our commitment to high data protection standards. We use Drata, a compliance automation platform, to continuously monitor and maintain regulatory compliance. Additionally, we conduct bi-annual third-party penetration testing to identify and address potential security vulnerabilities.