# Fountain

Fountain is the market leader in high volume hiring that enables customers to get ahead of their hiring goals. Fountain’s all-in-one platform enables companies to find qualified candidates and move them from application to onboarding quicker, reducing time-to-hire from weeks to days—or even hours. By simplifying the screening, interviewing, and hiring experience, Fountain’s solutions keep applicants happy while ensuring organizations have pipelines full of high quality hourly talent that are ready to work. Hundreds of customers use Fountain’s solutions to hire over 3 million workers annually in more than 75 countries.

## Compliance

SOC 2 Type II

ISO/IEC 42001:2023

ISO 27001:2022

SOC 1 Type II

GDPR

CCPACOMPLIANT

CCPA

## Resources

[Fountain ISO 42001.pdf](https://trust.fountain.com/?requestAccessOpen=true&requestedResources=69fcf80f2d7515b4d44e39ff)

[ISO 27001:2022](https://trust.fountain.com/?requestAccessOpen=true&requestedResources=66215c48fca6c0dae21566fa)

[Fountain - 2025 SOC 1 Type 2 Report 1.pdf](https://trust.fountain.com/?requestAccessOpen=true&requestedResources=698b9489817e4b27e9d0e3a6)

[Executive Summary of Penetration Test- 2025](https://trust.fountain.com/?requestAccessOpen=true&requestedResources=65e8ae127146edfa8334cf2c)

[Fountain AI Recruiter Compliance, Privacy & AI FAQ..pdf](https://trust.fountain.com/?requestAccessOpen=true&requestedResources=689e54ad6e4c6456e3f5e786)

Fountain Enterprise Readiness

[AI Bias Audit Reports](https://trust.warden-ai.com/fountain/ai-recruiter) Opens in new tab

## Controls

Updated 17 minutes ago

[**Infrastructure security**](https://trust.fountain.com/controls#infrastructure-security)

- Remote access MFA enforced

- Remote access encrypted enforced

- Network segmentation implemented

[**Organizational security**](https://trust.fountain.com/controls#organizational-security)

- Employee background checks performed

- Confidentiality Agreement acknowledged by employees

- Performance evaluations conducted

[**Product security**](https://trust.fountain.com/controls#product-security)

- Data encryption utilized

- Control self-assessments conducted

- Penetration testing performed

[**Internal security procedures**](https://trust.fountain.com/controls#internal-security-procedures)

- Configuration management system established

- Whistleblower policy established

- Board charter documented

## Data collected

- Customer personally identifiable information

- Employee personally identifiable information

- Credit card information

- Personal health information

Vanta connects to a company's core systems to continuously monitor these controls.