generated: '2026-07-21'
method: searched
source: https://talentium.io/security/
notes: >-
  Talentium publishes a Security & Compliance page describing a GDPR-compliant,
  EU-hosted, encrypted platform that also adheres to the EU AI Act. No named
  third-party attestations (SOC 2, ISO 27001, HIPAA) are published as of this
  pass. There is no public API/OpenAPI, so cross-cutting API standards
  (oauth2/oidc/rfc9457/etc.) are not assertable.
standards:
- id: gdpr
  conforms: true
  evidence: "security page: 'Talentium follows strict GDPR standards to protect your privacy'; EU-based data centers"
- id: eu-ai-act
  conforms: true
  evidence: "security page: 'We adhere to the latest EU AI Act requirements for responsible AI deployment'"
- id: encryption-at-rest
  conforms: true
  evidence: "security page: AES-256 encryption at rest"
- id: encryption-in-transit
  conforms: true
  evidence: "security page: TLS 1.2 in transit (live probe observed TLS 1.3 on talentium.io)"
- id: soc2
  conforms: false
  evidence: not published
- id: iso27001
  conforms: false
  evidence: not published
- id: hipaa
  conforms: false
  evidence: not published