Is BarRaiser a SOC2 Compliant Company?

With the pace at which technology is evolving, customers or potential customers find themselves in a pickle about whether to trust any new advancement made in technology. This is a grave problem in the SaaS(software as a service) industry. Certain types of certifications can help both the company developing the software and the one buying it.

These certifications prove that the company deploying them has the necessary infrastructure in place to provide a quality and safe experience. One such certification is SOC 2.

The roots of SOC 2 can be traced all the way back to the 1970s, when the SAS 1(Statistical Analysis System) allowed companies and institutions to do large-scale data analysis for the first time. Then, in the year 2000, the dot-com bubble burst, which destroyed several companies that had spent exorbitant money on infrastructure. However, that left them with little cash flow, so when the dot-com bubble burst, several companies were wiped with it.

So, what was the aftermath of the dot com bubble burst? It was the rise of a new technology called cloud-based services. These companies allowed others to store data on cloud servers. This was a much cheaper alternative and allowed companies to store large quantities of data for a fraction of prices as compared to the traditional ways.

However, the rise of cloud-based services eerily mirrored that of the dot com in the 1990s. Thus, the American Institute of Certified Public Accountants (AICPA), the professional organization of Certified Public Accountants (CPAs), created the System and Organization Controls 2 certifications.

This has now become the gold standard worldwide for companies that provide SaaS services. Having an SOC2 certification is now considered a must for companies to increase their brand reputation.

Also Read: What Is Skill Based Hiring? A Guide To Leaders

What is SOC2 compliance? 

The SOC 2 compliance is considered a watershed moment in the history of SaaS compliance. So, what is SOC2 compliance? The AICPA created guidelines under the SOC2, called the Trust Service Criteria (TSC), also known as the Trust Services Principles and Criteria. These guidelines test the company’s infrastructure on five points:

• Security 
• Availability 
• Processing integrity 
• Confidentiality 
• Privacy.

The TSC provides an all-around assessment of a company’s ability to safely handle large quantities of data.

Also Read: Interviewer Training vs Coaching: Which Is Best?

Security

The first aspect of TSC is security, where a company’s security is tested against various types of threats from malicious online attackers. This means testing the organization’s capabilities in securing its data from unauthorized access or phishing attempts from malicious actors.

Companies need to have a robust threat detection system that must detect the threats as soon as possible to keep the threat of online attacks to a minimum. The security has nine points of focus:

• Control Environment
• Communication and Information
• Risk Assessment
• Monitoring Activities
• Control Activities
• Logical and Physical Access Controls
• System Operations
• Change Management
• Risk Mitigation

Under the new guidelines, the AICPA has instructed companies to add more security, especially where personally identifiable information of an individual or company is.

Also Read: How to Transition from Slapdash Hiring to Quality Recruitment?

Availability 

The availability part of the TSC focuses on how accessible data is to a user. This can be divided into further parts such as:

• Availability Management: This focuses on how a user can use the services under the service level agreements (SLAs).
• Capacity Management: This focuses on whether the system is prepared for handling large chunks of data.
• Data Recovery: This analyzes how the company helps the user record data in case of an untoward incident.
• Disaster Management: No matter how many security measures are implemented, malicious actors may still succeed in breaching security. Thus, companies need to have a robust plan to safeguard data and recover it.

Also Read: How to Write Interview Scorecard for Effective Hiring

Confidentiality 

All types of companies are now reliant on cloud-based services, which means that they house various types of information, including data related to confidentiality and national security. Companies can state the data as ‘confidential’ and ask the SaaS platform to provide additional security measures.

Also Read: Myths and Facts related to AI hiring

Processing integrity 

A great way for companies to improve their services is to have processes that continuously look for any gaps in the system. This means deploying data validations, checks, and error-handling guidelines. It also includes having input and output integrity while uploading the data on the platforms. A great way is to establish that your systems are able to detect and prevent any threat attempts from malicious actors.

Also Read: Why is Industry knowledge important while hiring

Privacy 

SaaS platforms do require consent to use their clients’ data to improve their services. However, that data needs to be used and processed under the stringent laws of the SOC2 guidelines, which check whether the company has adequate security while using or transferring this data and whether the data stays within the physical boundaries of the country from which it was collected.

Also Read: Things To Remember While Selecting Interview Intelligence Tool

Is BarRaiser a SOC2-compliant organization  

So, now we come to the main question: Is our state–of–the–art AI interview assistant SOC2 certified? It absolutely is. So, what measures do we take to safeguard your data, you may ask? Well, a lot.

First, we operate under all the major AI laws passed around the globe that are considered, such as the European Union’s recent AI Act, New York City’s Automated Employment Decision Tools (AEDT) Law, or the Colorado AI Law. This means that your data while with us is as secure as possible. 

SOC2 certification is considered a watershed moment in online security because it was the first set of guidelines that also focused on the security of non-financial data. This established for the first time that every type of data involving personal information was important to be secured.

Also Read:How does compliance check help in improving hiring

At BarRaiser, we first ask the interviewer for their consent to record the interview. This fosters an environment of trust between the candidate and the interviewer. We also provide customizable data retention so that each company can determine which plan might be the most suitable.

We also keep the data within the regional data centers so it does not cross a country’s physical boundaries. We can also compartmentalize the type of access given to a person based on their designation in the client’s company. This ensures that if a specific piece of data is marked as confidential, only the senior management of the company will have access to it.

BarRiaser has experience serving over 250 clients and conducting more than 1,00,000 interviews to date. We have a collection of over 150,000 interviewing hours saved, which allows us to make our products even better.

Also Read: How BarRaiser offers end to end solutions for hiring

So, how does our product work? Before we go any further, we must first establish one thing clearly. BarRaiser is an AI interview assistant, which means that our tool assists the interviewer in the recruitment process and does not make any decisions of its own. This ensures that the power remains in the hands of our clients, who can use the data provided in any way that they may seem to be fit.

Our tool is an AI bot that easily integrates with a company’s Application Tracker System (ATS). This means that companies don’t need to install any new software on their systems, making the learning time on our tool faster. 

So, before the interview, recruiters can give specific instructions to our bot on how to create an interview plan for all the candidates. Thai includes all the questions related to the job posting. However, in the middle of the interview, if the interviewer wants new questions, they can ask the AI bot to go through a candidate’s CV to look for new questions. Since our software records and transcribes every interview, the recruiter can also ask our AI bot to go into the context of the interview to find new questions.

Also Read: How BarRaiser eliminates the need for interview debriefs

After the interview, the interviewer is asked to give detailed feedback. However, this process is monitored by the AI. In this process, the recruiter is asked to rate the candidate on 45 parameters. Once again, our system of checks and balances comes into play.

On top of that our AI-generated interview notes creates a short summary of the transcripts segment wise along with the video for both the interviewer or the hiring manager to access it later. This ensures that every stakeholder can review the data making the process less error prone.

Simultaneously, the AI is also creating a report of its own. This report analyzes how the interviewer performed during the interview. This report is sent to the hiring manager who can then analyze the recruiter’s performance and can drop comments highlighting the positives and negatives of the interview.

Using BarRaiser, we guarantee you quality hiring that will also bolster diversity and inclusion. BarRaiser is the best AI interview platform that features structured interviews and tools to ensure quality hiring while eliminating biases from the recruitment process. With BarRaiser’s support, you’ll be well-equipped to build a strong team of sales associates who will drive sales and deliver exceptional customer service.