When it comes to hiring globally, trust isn’t a luxury. It’s the foundation.
At Borderless AI, we’re building the infrastructure for a new era of work, one that’s borderless, AI-native, and radically more efficient. But innovation only matters if it’s built on trust, and today we’re proud to share a major milestone that reinforces our commitment to exactly that:
Borderless is now SOC 2 Type II Certified.
We’ve also launched a fully updated, transparent Trust Center to give our customers, partners, and stakeholders a real-time window into our security posture and data protection protocols.
Here’s what that means, and why it matters more than ever.
Why SOC 2 Matters (Especially in HR)
SOC 2 (Service Organization Control 2) is a rigorous auditing framework developed by the American Institute of Certified Public Accountants (AICPA). It’s the gold standard for ensuring service providers manage customer data in a secure, confidential, and privacy-conscious way.
But this isn’t just about passing a test.
In HR, we’re not just handling “data.” We’re talking about people’s salaries, identities, locations, tax IDs, healthcare coverage, and even their children’s benefits. Security isn’t a checkbox; it’s the foundation of every payroll run, every contract signed, every vacation request approved.
For customers trusting us to manage their global teams across 170+ countries, SOC 2 is a critical signal: Borderless AI has your back.
What We Did (And How We Got There)
SOC 2 level trust isn’t something you slap on after the fact. It requires deep structural diligence. Here’s what we put in place:
- End-to-End Encryption: All customer data, at rest and in transit, is encrypted using AES-256 and TLS 1.3.
- Role-Based Access Control (RBAC): Access to data and systems is tightly restricted, with just-in-time permissions and audit logging on every session.
- Automated Monitoring & Threat Detection: We use industry-standard tooling to monitor system health and detect anomalies in real-time.
- Vendor Risk Management: Third-party providers undergo rigorous security and compliance checks before integration.
- Continuous Security Education: Every employee completes mandatory annual training on security, compliance, and data protection, reinforced with internal simulations and testing.
- Incident Response Protocols: We’ve built a transparent, fast-moving IR process that includes audit trails, communication frameworks, and legal escalation pathways.
Our SOC 2 Type II report covers an audited period of operational effectiveness. In other words, this wasn’t a point-in-time review; it was an ongoing test of how we operate every day.
“From day one, we built Borderless AI on modern infrastructure designed for scale, security, and automation. SOC 2 Type II is validation that our systems don’t just move fast, they do so with rigour and resilience.”
— Derrick Isaacson, Chief Technology Officer, Borderless AI
Launching Our Trust Center
In tandem with our SOC 2 milestone, we’re launching an updated Trust Center designed to provide real-time access to:
- Our compliance certifications
- System status and uptime reports
- Risk and vulnerability disclosures
- Data protection policies
- Frequently asked questions about how we secure your business
The Trust Center isn’t a marketing page. It’s a living, breathing source of truth. You can use it to verify our latest updates, review technical documentation, and understand exactly how we protect your data and your people.
We believe security should be transparent. That’s why we’re not just compliant, we’re open.
Security in the Age of Agentic AI
Borderless AI isn’t a traditional HR software platform. We’re building a new category: AI-native HR.
That means we deploy AI agents (like HRGPT) across the entire HR stack, from onboarding and compliance to real-time payments and expense reimbursements. These agents aren’t just bots, they’re autonomous systems with access to sensitive systems and data.
So when we talk about trust, we’re talking about more than just encryption or access control. We’re talking about:
- Auditability: Every AI action has a trail.
- Transparency: Customers can inspect and control how our AI agents behave.
- Compliance by Design: Our models are grounded in globally verified employment law data from PwC, updated bi-weekly across 170+ countries.
- Minimal Human Intervention: Reducing manual data handling means reducing human error and exposure risks.
And yes, all of it is SOC 2 audited.
What Sets Borderless AI Apart
Plenty of HR platforms are pursuing AI features. But they’re doing it from legacy architectures, built for the 2010s, patched for the 2020s.
We took a different approach:
- We built for AI from Day 1. No retrofitting. No bolted-on chatbots. HRGPT was architected from the ground up with compliance, security, and accuracy at its core.
- We don’t hold your cash. Unlike traditional EOR providers, we don’t require salary deposits or pre-funded accounts. That eliminates unnecessary financial exposure, and boosts your liquidity.
- We operate in real time. Payroll, contract generation, employee onboarding, it all happens in minutes, not days or weeks.
- We own our stack. No outsourced vendors. No black-box integrations. Every element of our product, compliance, payments, and support is built and managed in-house.
“In global employment, trust is earned. SOC 2 is more than a certificate, it’s a signal to every founder, HR leader, and finance team that we take this responsibility seriously. And we’ll never stop raising the bar.”
— Willson Cross, Co-Founder & CEO, Borderless AI
For Our Customers, This Is What It Means
If you’re already using Borderless AI, this is another layer of trust on top of the speed, automation, and cost savings you’ve already seen.
If you’re considering a switch from a legacy EOR provider, here’s what SOC 2 means in plain terms:
- Your employee data is protected.
- Your payroll runs are secure.
- Your compliance risks are minimized.
- Your investors and finance teams can sleep better at night.
And unlike platforms that only show you a badge, we’ll actually show you how it works.
Looking Ahead: What’s Next for Trust at Borderless AI?
Security is not a milestone, it’s a commitment. With SOC 2 under our belt, we’re continuing to raise the bar:
- ISO 27001 Certification: Currently in motion.
- Penetration Testing Reports: Available upon request for enterprise customers.
- Zero-Trust Architecture Enhancements: Rolling out across our internal systems.
- AI Safety Audits: Including model hallucination testing and red-teaming to ensure agents behave as intended.
We’re also expanding our compliance footprint to support global customers in regulated industries, from fintech to healthtech to education.
Closing Thought: Trust Isn’t a Feature. It’s a Responsibility.
As HR and Finance teams race to keep up with global growth, automation is a must. But automation without accountability is a liability.
At Borderless AI, we don’t just want to move faster. We want to move smarter, safer, and in service of the people and companies who trust us.
SOC 2 isn’t the end. It’s the baseline.
Let’s build something borderless and secure, together.