Huma simplifies the administration of employees, keeps local laws and regulations in order, and automates heavy processes for small and medium-sized companies in the Nordics.
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
ISO 27001
International standard for an information security management system, certified by accredited bodies.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
Compliance timeline
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Humahr discloses on its trust center. Linked entries have their own profile in the Trust Index.
53% chain trust: 8 of 15 disclosed subprocessors are themselves in the Trust Index.
- MongoDB Atlas Hosting of database for the services
- Scrive Electronic signatures
- Neo4j Aura Hosting of database for the services
- Pendo Aggregate and analyze data on usage of the Services
- Heroku Hosting of the services API
- Redis Cloud Caching database
- Auth0 Authentication with OTP
- Younium Subscription billing
- Maventa Electronic invoicing
- Mailgun Automated email notifications
- Mentr AI summary & analysis video meetings
- Fastly Content Delivery Network
- ImageKit Image optimization
- OpenAI - API platform Content Assistant
- HubSpot Customer support
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.