Peopleix Trust Center

generated: '2026-08-14'
method: probed
source: https://trust.peopleix.com (HTTP 200) and https://www.peopleix.com/llms.txt
note: >-
  UPGRADE over the 2026-07-20 round, which recorded "no dedicated trust portal found".
  peopleIX now operates a real trust center at https://trust.peopleix.com — HTTP 200,
  canonical link rel points at itself, title "peopleIX Trust Center", hosted on Vanta
  (content-location assets.vanta.com, EU tenant app.eu.vanta.com, trust-report slug
  p1g8lgaeyivu1lc650i555). The certification and control inventory below is taken from
  the page's own served metadata and from the llms.txt published on the same date. The
  page body itself renders client-side (Vanta React SPA), so the individual document
  list, sub-processor register and monitored-control counts could not be read without a
  browser and are NOT recorded here — they are gated behind JS rendering, not behind a
  login. The llms.txt describes the trust center as carrying "certificates, policies,
  sub-processors".
trust_center:
  url: https://trust.peopleix.com
  status: 200
  platform: Vanta
  platform_evidence: >-
    content-location https://assets.vanta.com/static/vite/index-trust-report.vite...html;
    og:image https://app.eu.vanta.com/doc?s=kk7ulk04wpdmr19cc1lfd; data-slugid
    p1g8lgaeyivu1lc650i555.
  region: EU tenant (app.eu.vanta.com)
  rendering: client-side (JS-rendered SPA) — document inventory not machine-readable
certifications:
- name: ISO 27001
  status: certified
  evidence: >-
    "ISO 27001 certified" — llms.txt (2026-08-14 revision; the 2026-07-20 capture said
    "ISO 27001 compliant", so this is a strengthened claim) and the trust center page
    description.
  auditor: not published
  report_available: unknown
- name: GDPR
  status: claimed-compliant
  evidence: "'GDPR compliant'; EU-resident end-to-end (application, AI models, engineering)."
controls:
- EU-resident application, AI models, and engineering
- AES-256 encryption at rest
- TLS 1.2+ encryption in transit
- Never trained on customer data
- Permissioned by default — the customer decides who sees what
- Conversations aggregate anonymously; employees never see each other's transcripts
documents_published:
  certificates: claimed (llms.txt names the trust center as carrying certificates)
  policies: claimed
  sub_processors: claimed
  note: Named by peopleIX as trust-center contents; not independently readable because the page is JS-rendered.
x-evidence:
  fetched: '2026-08-14'
  urls:
  - url: https://trust.peopleix.com
    status: 200
    content_type: text/html
  - url: https://www.peopleix.com/llms.txt
    status: 200