INDEX / DIRECTORY / HIBOB / DIGITAL

HiBob DIGITAL

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-09-08
Digital Score 6.00 /10 A HiBob - BDS-1000 833
Digital 6.00

Evidence-only forensic audit. Scoring happens downstream - see the main dossier for the composite assessment.

Forensic audits like this are reader-funded - no sponsors, no ads. Support OpenIntel →

Domain Audit: HiBob - Digital Audit

Enterprise Technology Stack & Vendor Relationships

HiBob’s published sub-processor disclosure does not name Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, or Palo Alto Networks as licensing or subscription vendors. No public evidence identified of any such relationship in the reviewed disclosures.1, 2 The current disclosure instead identifies Cloudinary Ltd. for platform-wide image and media processing and Descope Technologies Israel (2022) Ltd. for optional platform SSO and module-wide authentication for US Payroll and Bob Finance, with EU processing locations stated for both uses.1, 2 Cloudinary was founded in 2012 in Petah Tikva, Israel, and maintains US headquarters alongside an Israel office.3 Descope was founded in April 2022 by an Israeli team formerly associated with Demisto, and maintains a Tel Aviv office.4

A prior third-party case study identifies Dig Security, a Tel Aviv-founded cloud data-security-posture-management company, as provider of HiBob’s cloud data-visibility and scanning capability.5 Palo Alto Networks announced its intent to acquire Dig Security on 31 October 2023 and completed the acquisition on 5 December 2023, incorporating the technology into Prisma Cloud.6, 7 no public evidence identified confirming that HiBob’s direct use of the Dig product continued after the acquisition.5, 6, 7

HiBob identifies AWS and Cloudflare as principal cloud and network-security infrastructure providers.8, 1 no public evidence identified of named systems integrators or IT-transformation consultancies engaged by HiBob for major technology programmes.1, 8

Surveillance, Biometrics & Retail Technology

No public evidence identified of HiBob’s use of facial recognition, biometric identification, gait analysis, or products from Trigo, BriefCam, AnyVision/Oosto, or Trax.1, 8 HiBob’s reviewed materials describe a B2B HR SaaS platform; no retail or physical-security product line was identified.8, 9

No public evidence identified of predictive-policing tools, sentiment-analysis surveillance products, social-media monitoring tools, or third-party workforce-surveillance procurement beyond HiBob’s own people-analytics features.1, 8, 10 Cassiopeia’s historical interaction-analytics product connected to Slack, calendars, Zoom, and email and analysed communication metadata and team relationship patterns, including interaction frequency, meeting efficiency, collaboration, and meeting-versus-flow-time measures; HiBob and Cassiopeia stated that it did not access communication content.10, 11 The available record does not specify the historical metadata schema, identifiers, contact-graph fields, retention, connector permissions, or access controls, and does not establish that Cassiopeia processed HR profiles, payroll, banking, national-ID, or message-content data.10, 11

Current Bob privacy materials describe broader workforce data processing, including profile and contact data, national IDs, employment, compensation, benefits, dependants, emergency contacts, bank-account and investment-plan information, usage/IP/device data, optional geofenced attendance data, and payroll information.12 This is evidence about current Bob processing, not proof that the historical Cassiopeia product processed each category.10, 11, 12

Your Voice is a current optional anonymous workplace-misconduct reporting capability. Its available materials describe a reporter-provided non-organisational email address, incident description, claim category, and timestamps for correspondence with a customer-designated representative; the email address is described as encrypted.13, 12, 14 The materials do not establish that the historic Cassiopeia relationship-analytics infrastructure processed these reports or that Your Voice uses unchanged Cassiopeia code or architecture.13, 12, 14

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

HiBob does not appear to operate its own customer-data-centre infrastructure in Israel. Its security materials identify AWS Ireland as the primary production location and AWS Frankfurt, Germany, as the disaster-recovery location.8, 15, 16 HiBob’s November 2025 disclosure identifies AWS EMEA as platform-wide cloud-computing and storage infrastructure with EU processing stated.2

HiBob’s affiliate disclosure identifies Hi Bob Ltd. at 148 Menachem Begin Road, Tel Aviv-Jaffa, Israel, and HiBob’s current corporate site lists a Tel Aviv office at the same address.2, 9 The affiliate list states that group affiliates, including Hi Bob Ltd., may act as sub-processors and may have access to personal data when delivering services on a customer’s behalf.2 HiBob’s February 2026 general privacy policy identifies Hi Bob Ltd. as database controller under Israel’s Protection of Privacy Law for personal data covered by that policy, while stating that HiBob processes customer end-user data supplied to the Solutions on customer instructions.17

HiBob’s end-user policy states that customer personal data may be accessed from offices in the EU, UK, US, Israel, Canada, and Australia by employees handling support, technical assistance, and similar services, and that personal data may be disclosed internally within the HiBob group.12 This establishes a published potential-access pathway from Israel; it does not identify particular personnel, permissions, access logs, tenant-specific datasets, actual access events, or disclosure to an Israeli state body.2, 12 The policy also states that personal data may be maintained, processed, and stored in Israel and other locations, but does not displace HiBob’s stated AWS Ireland primary hosting and German backup locations.17, 16

HiBob’s January 2026 subscription terms define the contracting party as the HiBob legal entity signing the customer order form; they do not establish that every European customer contracts with the Israeli entity.18, 19 No public evidence identified of disclosure to Israeli intelligence bodies. This absence is distinct from the published provision for HiBob employees in Israel to access customer personal data for support and technical assistance; neither policy establishes a particular access event or a state recipient.18, 2, 12

No public evidence identified of HiBob participation in Project Nimbus or a comparable Israeli government-backed cloud or AI infrastructure programme.20, 21, 22 no public evidence identified of HiBob marketing or contracting sovereign-cloud, data-sovereignty, or resilience services to Israeli state institutions or military bodies; the reviewed disclosures identify HiBob as an AWS tenant and HR-software provider, not a sovereign-cloud provider.8, 2, 16

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of contracts between HiBob, Cassiopeia, Your Voice, or Cassiopeia-derived functionality and an Israeli ministry, the IDF, intelligence agencies, police, prison authorities, border bodies, settlement authorities, settlement enterprises, or other Israeli security bodies.20, 21, 22, 10, 23, 24 Targeted searches combining HiBob, Cassiopeia, and Your Voice with Israeli government, Ministry of Defence, IDF, intelligence, police, settlement, and Project Nimbus terms retrieved no relevant tender, contract, deployment announcement, or investigative report.10, 23, 24

HiBob’s June 2021 acquisition announcement stated that Cassiopeia’s customers were primarily in the United States, United Kingdom, and Israel, but did not name customers or identify a government or security client.10 The absence conclusion is limited to the reviewed public sources and searches and does not establish that no customer relationship exists.20, 21, 22, 23, 24

No public evidence identified of HiBob’s commercial HR software being repurposed for military, intelligence, law-enforcement, or occupied-territory surveillance applications in Israel.20, 21, 22 no public evidence identified of HiBob developing, selling, or licensing offensive cyber capabilities, zero-day tools, digital weapons systems, or autonomous targeting, threat-detection, or tracking systems to Israeli military or security forces.20, 21, 22

On adjacent, non-technology-provision grounds, HiBob CEO Ronni Zehavi sits on the executive committee of the IDF Disabled Veterans Organization (Beit Halochem) and spoke publicly in November 2025 about HiBob funding a “Beit HaLochem 2.0” rehabilitation centre in Tel Aviv and a storytelling platform for wounded veterans.25 HiBob also granted 1,800 stock options each to 47 employees who served more than 30 days of IDF reserve duty after 7 October 2023.26, 27 These reported activities concern philanthropy and internal employee compensation, rather than a demonstrated technology-provision relationship with Israeli security bodies.25, 26, 27

AI, Algorithmic & Autonomous Systems

HiBob’s engineering blog describes AiMind as an internal employee AI platform built on AWS Bedrock using retrieval-augmented generation over documents and internal knowledge bases uploaded by HiBob teams.28 The source does not establish that AiMind is a customer-facing HR product or that it is supplied to a state or military body.28 HiBob’s sub-processor disclosure names OpenAI, L.L.C. and Microsoft Corporation (Azure OpenAI) as optional AI sub-processors supporting generative-AI features.1, 2

No public evidence identified of HiBob providing AI or ML systems to Israeli state, military, intelligence, police, prison, border, settlement, or security bodies.20, 21, 22, 23, 24 no public evidence identified that HiBob’s AI models were trained on, or given access to, civilian population data, intercepted communications, or surveillance-derived datasets from Israel or the occupied territories.1, 8, 28, 12 no public evidence identified of autonomous targeting, threat-detection, or tracking functionality supplied by HiBob.20, 21, 22

Technology Ecosystem & R&D Footprint

HiBob was founded in Tel Aviv in 2015 by Ronni Zehavi, Amit Knaani, Israel David, and Andy Bellass; published company and investor materials describe Tel Aviv as the birthplace of Bob and a primary R&D centre.29, 30, 31 HiBob’s current site continues to list a Tel Aviv office at 148 Menachem Begin Road.2, 9 A 2024 ISG report described HiBob as co-headquartered in London, New York, and Tel Aviv, with 800 employees globally in FY2023; this is analyst reporting rather than a corporate filing.32

UK Companies House records HI BOB LIMITED, company number 09787994, as an active private limited company incorporated in England and Wales on 22 September 2015, with a London registered office and latest accounts for the year ended 31 December 2024 filed on 10 September 2025.33 Companies House records HI BOB (UK) LIMITED, company number 10568577, as having HI BOB LIMITED as an active person with significant control holding at least 75% of shares and voting rights.34 This verifies that direct UK parent–subsidiary relationship only; it does not provide a complete group ownership chart or establish the ultimate parent for every affiliate.33, 34

The active PSC statement for HI BOB LIMITED records that the company knows or has reasonable cause to believe no registrable individual or legal-entity PSC exists. Ronni Zehavi is recorded as a former PSC who ceased on 4 January 2017, with the historical filing indicating 25–50% share ownership, more than 50% but less than 75% voting rights, and appointment/removal rights.33 This does not identify current beneficial ownership or exclude shareholders below UK PSC reporting thresholds.33

HiBob acquired Cassiopeia on 3 June 2021.10 At acquisition, HiBob identified Cassiopeia’s US headquarters as San Francisco, while its chief executive and co-founder stated in an August 2020 interview that the R&D side was located in Israel and the business side in the United States.10, 11 This is contemporaneous evidence of an Israeli operating base independent of founder nationality.11

A public-data portal identifies Cassiopeia Social Innovation Ltd., company number 515652782, as an Israeli private company incorporated on 8 May 2017 with a Tel Aviv-Jaffa address and a displayed “voluntarily liquidated” status; the portal directs users to the Companies Registrar for formal verification and does not establish the entity’s legal status on the acquisition date, ownership, or transferred assets.35 An IVC commercial-database profile lists a Givatayim address and San Francisco branch and describes acquisition by HiBob on 3 June 2021; it is secondary corroboration rather than an official incorporation or transaction record.36 no public evidence identified establishing, through an official acquisition agreement or Israeli Companies Registrar extract, Cassiopeia’s precise acquisition-date legal entity, ownership chain, or assets transferred.10, 36, 35

HiBob’s 2021 announcement stated that Cassiopeia’s team joined HiBob and that its technology would be embedded into Bob’s people-analytics capabilities.10 HiBob’s current company history says it acquired “Cassiopia” in 2021 and incorporated Your Voice into Bob, while current privacy and product materials identify Your Voice as an available anonymous-reporting module.9, 12, 14 These records confirm historical integration and the continued availability of Your Voice, but do not establish whether the original Cassiopeia codebase, metadata connectors, source infrastructure, or access arrangements remain active, were re-engineered, or were retired.2, 10, 12, 14

HiBob has also acquired Pento, a UK payroll-automation company, and Mosaic, a US FP&A platform acquired for approximately $35 million in a deal signed in February 2025.37, 38 no public evidence identified of HiBob acquiring another Israeli-origin technology company beyond the Cassiopeia-related acquisition record described above.37, 38, 10 no public evidence identified of a formal HiBob venture-investment arm making strategic investments into Israeli startups or VC funds, or of patent, licensing, or co-development arrangements with Technion, Hebrew University, the Weizmann Institute, or other Israeli research institutions.29, 30, 31

Civil Society Scrutiny & Regulatory History

The retained full-text copy of OHCHR’s September 2025 settlement-business database update, A/HRC/60/19, contains no HiBob or Hi Bob match. Annex I lists 158 enterprises; this is a check of that report, not a claim about every future database edition.21 No HiBob-specific entry was located in the reviewed Who Profits interface; this interface review does not certify absence from every record.22, 24 no public evidence identified of a HiBob-specific card on AFSC Investigate, although the database interface alone does not certify absence across all records.39

The retained full-text Don’t Buy Into Occupation 2025 report likewise contains no HiBob or Hi Bob match. This finding concerns that report only.40 No named technology-related campaign targeting HiBob was identified in the reviewed Who Profits and AFSC materials; this does not exclude general Israeli-tech boycott-directory inclusion documented in the political audit.22, 39, 24

No public evidence identified of regulatory inquiries, export-control actions, or sanctions investigations involving HiBob’s technology sales or services to Israeli state entities.20, 21, 22 HiBob is privately held and was reported at an approximately $2.7 billion valuation after a 2023 $150 million funding round.41 The General Atlantic-led $150 million Series C cited separately occurred in 2021; historical investors include Battery Ventures, Bessemer Venture Partners, Eight Roads Ventures/Fidelity, and Farallon Capital.42, 41, 43 no public evidence identified of SEC 10-K or 20-F filings, consistent with HiBob’s private, non-US-listed status.42, 41, 43

HiBob announced an investment led by Salesforce with Farallon participation on 1 September 2026; the announcement title and artwork identify the investment as $166 million, without disclosing individual investor contributions or ownership percentages.44

Footnotes

  1. https://www.hibob.com/privacy/hibob-subsidiaries-and-sub-processors/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8

  2. https://www.hibob.com/privacy/hibob-subsidiaries-and-sub-processors/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11

  3. https://en.wikipedia.org/wiki/Cloudinary ↩

  4. https://www.forbes.com/sites/brucerogers/2023/06/12/israeli-founder-team-creates-ciam-company-descope-with-53-million-seed-round/ ↩

  5. https://www.devx.com/cybersecurity/hibobs-data-security-success-how-cloud-automation-secures-a-scaling-hr-platform/ ↩ ↩2

  6. https://www.paloaltonetworks.com/company/press/2023/palo-alto-networks - announces-intent-to-acquire-cloud-security-start-up-dig-security ↩ ↩2

  7. https://www.paloaltonetworks.com/company/press/2023/palo-alto-networks-completes-acquisition-of-dig-security ↩ ↩2

  8. https://www.hibob.com/privacy/security/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8

  9. https://www.hibob.com/about/ ↩ ↩2 ↩3 ↩4

  10. https://www.prnewswire.com/news-releases/hibob-continues-on-growth-trajectory-with-acquisition-of-workplace-relationships-analytics-startup-cassiopeia-301305028.html ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13

  11. https://distantjob.com/blog/podcasts/improve-culture-team-dynamics-remotely/ ↩ ↩2 ↩3 ↩4 ↩5

  12. https://www.hibob.com/privacy/privacy-policy-end-users/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10

  13. https://go.hibob.com/rs/466-KLY-124/images/Your_Voice.pdf ↩ ↩2

  14. https://www.hibob.com/features/your-voice/ ↩ ↩2 ↩3 ↩4

  15. https://sota.io/blog/hibob-eu-alternative-2026-israel-gdpr-adequacy-cloud-act-hr-software ↩

  16. https://www.hibob.com/privacy/security/ ↩ ↩2 ↩3

  17. https://www.hibob.com/privacy/privacy-policy/ ↩ ↩2

  18. https://www.hibob.com/privacy/customer-subscription-terms/ ↩ ↩2

  19. https://www.hibob.com/privacy/customer-subscription-terms/ ↩

  20. https://www.ohchr.org/en/business/bhr-database ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8

  21. OHCHR, A/HRC/60/19 (26 September 2025), full-text company-name check and Annex I. Retained original report associated with the publisher announcement: https://www.ohchr.org/en/press-releases/2025/09/un-human-rights-office-updates-database-businesses-involved-israeli ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9

  22. https://www.whoprofits.org/companies/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10

  23. https://www.vationventures.com/blog/emerging-technology-spotlight-cassiopeia ↩ ↩2 ↩3 ↩4

  24. https://www.whoprofits.org/companies/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  25. https://www.calcalistech.com/ctechnews/article/9kcounfjm ↩ ↩2

  26. https://www.calcalist.co.il/calcalistech/article/bj4vwgztjx ↩ ↩2

  27. https://undercodenews.com/hibob-recognizes-reservist-employees-with-stock-options-for-service-during-the-war/ ↩ ↩2

  28. https://medium.com/hibob-engineering/from-devops-dream-to-ai-reality-scaling-aws-bedrock-at-hibob-ce172c23bbed ↩ ↩2 ↩3

  29. https://en.wikipedia.org/wiki/HiBob ↩ ↩2

  30. https://www.bvp.com/atlas/the-rise-of-hibob ↩ ↩2

  31. https://www.hibob.com/about/ ↩ ↩2

  32. https://www.hibob.com/wp-content/uploads/ISG-Provider-Lens-HCM-Technology-for-Small-Market-and-Midmarket-HiBob-Licensed-2024-03-13.pdf ↩

  33. https://find-and-update.company-information.service.gov.uk/company/09787994 ↩ ↩2 ↩3 ↩4

  34. https://find-and-update.company-information.service.gov.uk/company/10568577/persons-with-significant-control ↩ ↩2

  35. https://next.obudget.org/i/org/company/515652782 ↩ ↩2

  36. https://www.ivc-online.com/Google-Card?id=25402d79-4c64-e611-893a-80c16e7d3630 ↩ ↩2

  37. https://www.calcalistech.com/ctechnews/article/ryvodwoyjl ↩ ↩2

  38. https://www.hibob.com/blog/hibob-acquires-mosaic/ ↩ ↩2

  39. https://investigate.afsc.org/all-companies?page=0 ↩ ↩2

  40. Don’t Buy Into Occupation V (November 2025), full report, full-text company-name check for HiBob and Hi Bob. https://dontbuyintooccupation.org/reports/dont-buy-into-occupation-report-2025/ ↩

  41. https://www.jpost.com/business-and-innovation/tech-and-start-ups/article-760127 ↩ ↩2 ↩3

  42. https://www.prnewswire.com/news-releases/hibob-secures-150m-series-c-funding-led-by-general-atlantic-to-help-midsize-businesses-modernize-hr-in-the-evolving-world-of-work-301398863.html ↩ ↩2

  43. https://techcrunch.com/2017/04/25/hr-and-employee-benefits-platform-hibob-raises-17-5m-led-by-u-s-based-battery-ventures/ ↩ ↩2

  44. https://www.hibob.com/news/salesforce-hibob-166m-investment/ ↩