{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"yello","name":"Yello","domain":"yello.co","category":"Recruiting","one_liner":"Yello's talent acquisition software and recruitment CRM is used by Fortune 500 companies to attract and nurture top talent from hello to","trust_center_url":"https://trust.yello.co/","security_page_url":null,"url":"https://certreports.com/vendors/yello/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/yello/soc-2","evidence":[{"source_type":"trust_center","source_name":"Yello trust centre (Vanta)","url":"https://trust.yello.co/","fetched_at":"2026-09-18 23:11:00.234032+00","content_hash":"b5bb84cf967c3078747cdcf29d660599b359b2a034f81478fb1b9a875b4975cf","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 18 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2022-04-11","expires_at":null,"period_start":null,"period_end":null,"auditor":"Schellman Compliance, LLC","impact_level":"Moderate","as_of":"2026-09-18","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/yello/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2113557839","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Yello Dba Recsolu Inc - Yello Government Recruiting Solution: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2113557839","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Yello Dba Recsolu Inc - Yello Government Recruiting Solution: FedRAMP Authorized","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/yello/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Yello trust centre (Vanta)","url":"https://trust.yello.co/","fetched_at":"2026-09-18 23:11:00.234032+00","content_hash":"b5bb84cf967c3078747cdcf29d660599b359b2a034f81478fb1b9a875b4975cf","wayback_url":null,"quote":"ISO 27001:2013","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 17 Sep 2026.","kind":"listing","status_text":"Inactive","issued_at":"2016-08-12","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/yello/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/2093","fetched_at":"2026-09-17 15:47:21.044705+00","content_hash":"060a711f64d6874a0b795a6483f50902b6e0cc8694920d37cafcb5b70d74d551","wayback_url":null,"quote":"Yello: Inactive","confidence":1}]}],"brief":null,"legal_docs":[{"kind":"subprocessors","url":"https://trust.yello.co/","availability":"public","detail":"18 subprocessors listed on the trust centre","as_of":"2026-09-18"},{"kind":"privacy","url":"https://yello.co/privacy-policy","availability":"public","detail":null,"as_of":"2026-09-18"},{"kind":"security_txt","url":"https://trust.yello.co/","availability":"public","detail":"Public documents on the trust centre: Yello ISO 27001:2022 Certificate; Yello ISO 27001:2013 Certificate","as_of":"2026-09-18"}],"subprocessors":[{"name":"\"Amazon Web Services, Inc.  (“AWS”)  \"","domain":"aws.com","purpose":"Cloud provider","location":"440 Terry Ave. N. Seattle, WA 98109 United States","vendor_url":null},{"name":"Appian Corporation Inc","domain":"appian.com","purpose":"Data storage and processing","location":"7950 Jones Branch Dr McLean, VA 22102","vendor_url":"https://certreports.com/vendors/appian/security"},{"name":"Citrix Systems, Inc. (Sharefile has been acquired by Progress (PRGS) )","domain":"sharefile.com","purpose":"Document management","location":"851 Cypress Creek Rd. Fort Lauderdale, FL 33309 United States","vendor_url":null},{"name":"Daxtra Technologies, Inc.","domain":"daxtra.com","purpose":"Data storage and processing","location":"3310 W. Clay St. Richmond, VA 23230 United States","vendor_url":null},{"name":"Gong.io","domain":"gong.io","purpose":"Customer support","location":"1200 Park Place, Suite 100 San Mateo, CA 94403 United States","vendor_url":null},{"name":"Google","domain":"google.com","purpose":"Data analytics","location":"1600 Amphitheatre Parkway Mountain View, CA 94043 United States","vendor_url":null},{"name":"HireEZ","domain":"hireez.com","purpose":"The Campus Recruiting Agent incorporates technology provided by hireEZ.","location":"San Jose, CA United States","vendor_url":"https://certreports.com/vendors/hireteammate-inc/security"},{"name":"Looker Data Sciences, Inc.","domain":"google.com","purpose":"Data storage and processing","location":"101 Church Street Santa Cruz, CA 95062 United States","vendor_url":null},{"name":"Metabase","domain":"metabase.com","purpose":"Data analytics","location":"9740 Campo Rd., Suite 1029, Spring Valley, CA 91977","vendor_url":null},{"name":"Pendo","domain":"pendo.io","purpose":"Data analytics","location":"150 Fayetteville St. Raleigh, NC 27601 United States","vendor_url":"https://certreports.com/vendors/pendo/security"},{"name":"Sendgrid","domain":"sendgrid.com","purpose":"Marketing","location":"1801 California St. Denver, CO 80202 United States","vendor_url":"https://certreports.com/vendors/sendgrid/security"},{"name":"Sisense Ltd","domain":"sisense.com","purpose":"Data storage and processing","location":"1359 Broadway 4th Floor New York, NY 10018","vendor_url":"https://certreports.com/vendors/sisense-inc/security"},{"name":"Sovren Group","domain":"textkernel.com","purpose":"Data storage and processing","location":"1107 FM 1431 Suite 205 Marble Falls, TX 78654 United States","vendor_url":null},{"name":"Starburst Data, Inc","domain":"starburst.io","purpose":"Data storage and processing","location":"177 Huntington Ave, Ste. 1703, Boston, MA 02115","vendor_url":null},{"name":"The Cloud Connectors","domain":"thecloudconnectors.com","purpose":"Data storage and processing","location":"2915 Ogletown Rd. Newark, DE 19713 United States 3200 Adrein Drolet Quebec, Canada G1X1J3","vendor_url":"https://certreports.com/vendors/the-cloud-connectors/security"},{"name":"Twilio, Inc.","domain":"twillio.com","purpose":"Recruiting","location":"375 Beale St., Suite 300 San Francisco, CA 94105 United States","vendor_url":null},{"name":"UNICOM Teleservices, Inc.","domain":"unicomcorp.com","purpose":"Customer support","location":"12560 S Holday Dr. Suite C Alsip, IL 60803 United States","vendor_url":null},{"name":"Vonage (f/k/a TokBox, Inc.)","domain":"vonage.com","purpose":"Collaboration","location":"501 2nd St., Suite 310 San Francisco, CA 94107 United States","vendor_url":"https://certreports.com/vendors/vonage/security"}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T03:30:58.288Z"}