Benefits Data Is Personal. Here Is Exactly How We Protect It.
Names, dates of birth, family members, health plans, pay deductions. We treat every record as if it were our own — and we tell you plainly what is in place today and what is still in progress.
This page is written for the HR leader who has to sign, the IT and security team that has to approve, and the procurement team that has to check. No logos, no adjectives — the controls, the status of each one, and how to get the full review pack.
Six Protections Every Customer Gets From Day One
Each one is built into the platform, not sold as an add-on. Ask us to show any of them in a demo.
Runs on clouds that hold the major certifications
The platform is deployed on SAP Business Technology Platform and AWS — see our SAP partnership. Those clouds hold the major independent certifications, and they handle the physical security, power, network and hardware layers.
Locked while it moves, locked while it sits
Every connection between the platform, your HR system, payroll and carriers is protected, and every stored record is locked. Each employer's data is kept apart from every other employer's.
One login, and each person sees only their part
Employees and administrators sign in with the login they already use — through SAP SuccessFactors or your company's identity provider. Each person sees only the screens and the records their role allows, down to the individual employee.
A permanent history of who did what
Every view of a sensitive field and every change to a record is written to a history that cannot be edited: who, what, when, and what the value was before. Approvals, overrides and emergency access all leave a trace.
Compliance checks that run on the platform itself
The same compliance framework we give customers runs on Benefits Reimagined: named controls, scheduled checks and evidence kept for each one — reviewable on request. Built for the health and pay information benefits work involves.
Privacy by design
We keep only what is needed, for as long as the rules say. A hold stops deletion while a matter is open. Documents and messages follow the same retention rules. Employees can see what is held about them and manage their consents on their own home page.
Certifications and Standards — Stated Plainly
We would rather you read a true table than a row of badges. Anything marked "in progress" is in the contract with a date.
| Standard | What that means for you | Status |
|---|---|---|
| Independent certification of Benefits Reimagined (SOC 2 · ISO 27001) | Planned and in progress. Written security review pack available now; the timeline is written into your contract. | In progress |
| Cloud provider certifications (SAP BTP · AWS) | Held by the cloud providers the platform runs on; reports available through them. | In place |
| Health information safeguards (HIPAA) | Data locked, access limited by role, history kept, retention rules applied. Ask us about the agreements your plan requires. | In place |
| State privacy laws (for example California) | Employees can see what is held about them; consents are managed on their home page; retention rules apply. | In place |
| Accessibility (WCAG 2.1 AA · Section 508) | Keyboard, screen-reader and contrast checks are part of every release. Accessibility statement. | In place |
| Outside security testing | Independent testing of the platform ahead of the certification audit; results shared under agreement. | Planned |
| Responsible AI governance | Every AI helper listed, tested and reviewed; a person decides; your data does not train public models. See Responsible AI. | In place |
The platform also gives your own administrators a full security and access control console — people, groups, roles, "which screens" and "whose records" decided separately, with every decision kept in history.
What Happens Behind the Screens, Every Day and on the Bad Day
Security is a set of habits, not a certificate. These are ours.
- Every dayOne version for every customer. Every customer runs the same release, so a security fix reaches everyone the same day — nobody is left on an old build.
- Every changeReviewed before it ships. Changes to the platform are reviewed by a second person, tested, and released on a schedule your named contacts see in advance.
- Every nightBacked up and restorable. Data is backed up on a schedule and restores are practised, so an outage means a delay, not a loss.
- Every personLeast access, for as long as needed. Our own staff get the least access their job needs, for the time it is needed, and it is reviewed and removed — with the same history your administrators get.
- The bad dayContain, assess, notify. A written incident plan with named owners. If your data is affected we tell your named contacts promptly, in plain words, and keep telling you until it is closed. Notification timelines are in the contract.
What the AI Helpers See, and What They Never Do
Athena, IntelliSuggest, IntelliMap and the other helpers work on your data to help your employees and administrators. These are the boundaries.
They see only what the signed-in person may see
An employee's question is answered from that employee's own record and your plan documents — never from another employee's data. The same role rules that limit people limit the AI.
Your data never trains public AI models
We use commercially available large language models under agreements that stop the provider keeping or learning from your data, and we do not use one customer's data to improve another customer's results.
A person decides; the AI proposes
No AI helper changes a record on its own. A suggestion shows its reasoning, a person approves or rejects it, and the decision is written to the history with the reason.
Every helper is listed, tested and reviewed
We keep a list of every AI helper, what it may do, what it may see and how it was tested for fairness and accuracy — reviewed against a recognised standard for managing AI risk, before release and after.
Get the Security Review Pack — and See the Controls Live
Book a walkthrough for your IT, security and procurement teams. We show one login, role-based access, the history and the compliance checks on screen, then send the written pack the same week.
- Live demo — as your employee, then as your administrator, on your plan structure
- Security review pack — the security and privacy answers your IT and procurement teams will ask for
- RFP response — every line answered against the platform, not a brochure
Questions Security Teams Ask Before They Approve
Certification status, data location, who sees what, AI, incidents and how to run your own review — answered the way we answer them in a meeting.
Not yet — and we say so. Independent certification of Benefits Reimagined itself (SOC 2 and ISO 27001) is planned and in progress. The clouds we run on (SAP Business Technology Platform and AWS) hold those certifications today. Until ours is complete we provide a written security and privacy review pack, answer your questionnaire line by line, and put the certification timeline in the contract.
On SAP Business Technology Platform and AWS, in data centers in the United States, kept apart from every other employer’s data. Data is locked while it moves between systems and while it sits in storage. We will name the exact hosting region in your security review pack.
Only the people whose role allows it, down to the individual record — an employee sees their own family’s record; an administrator sees the employees and the screens their role covers; nobody sees more because they asked nicely. Every view and every change is written to a permanent history with who, what and when.
The AI helpers work on your data to answer your employees’ questions and suggest plans, and they show their reasoning. Your data is not used to train public AI models and is not shared with other customers. Our Responsible AI page explains the rules in full.
We have a written incident plan: contain, assess, notify. If an incident affects your data we tell your named contacts promptly with what we know, what we are doing and what you need to do, and we keep telling you until it is closed. Notification timelines are written into the contract.
Yes. Send your questionnaire to info@BenefitsReimagined.com with "Security review" in the subject line. We answer every line against the platform as it is today — with a plain yes, no or how for each one — and we will walk your IT and procurement teams through it on a call.
Email info@BenefitsReimagined.com with "Security" in the subject line. A person acknowledges within one business day (the contact page lists every lane). We ask researchers to give us a reasonable time to fix a problem before publishing it, and we will not take action against anyone who reports in good faith.
Trust Is Earned With Controls, Not Claimed With Badges
What is in place today, what is in progress, and a person to call about either. SAP-native, ready for any HRIS.