What we touch, and how we handle it.
We operate inside your HR systems and see your employees’ data. Here is the plain-language version of how we treat it — access, tooling, retention, and where we draw the line on AI.
Four commitments the rest of this page just makes specific.
Least access, by default
We take the narrowest access that does the job — scoped to named people, and removed the day an engagement or a team member ends.
Your data stays in your systems
We operate inside the HRIS you own. Your employee records are not copied into a People Street database to run our service.
Never sold, never trained on
Your data is never sold, never shared beyond the subprocessors that run your own systems, and never used to train a public AI model.
A hard line on AI
We use AI to move faster on our own work. Your employees’ personal data does not go into third-party prompts — the specifics are below.
The narrowest key that opens the right door.
Named, not shared
Access is tied to specific People Street people. No shared logins, no generic service accounts standing in for a person.
Least privilege
Each person gets the role the task needs and no more. Admin rights only where the work genuinely requires them.
Multi-factor everywhere
Every system that touches your data sits behind multi-factor authentication and a managed password vault.
Removed on exit
When an engagement ends or someone rolls off, access is revoked the same day — on the offboarding checklist we run for our own team.
Your systems, plus the shortest list on top.
Your data lives in the platforms you’ve licensed. We add as few tools as possible on top, and name every one of them in your agreement.
HR & payroll platforms
Rippling, HiBob, ADP Workforce Now, Dayforce and Workday — the system of record you’ve licensed and asked us to operate.
Recruiting systems
Ashby, Gem and Greenhouse, where we run embedded recruiting into your HRIS.
Our own tooling
A password manager, a ticketing desk, and productivity tools — kept to the shortest list that does the job.
A current subprocessor list and a data processing agreement come with onboarding. Ask for them any time.
Useful on our work. Nowhere near your people’s data.
We’re the firm that turns AI on safely — starting with ourselves. Here is exactly where the line sits.
What never goes into a prompt
- Names attached to individual employee records
- Social Security or national ID numbers
- Compensation, equity and banking details
- Benefits, medical and dependent information
- Anything that identifies one of your people
Where we do use it
- Draft and structure our own documentation and runbooks
- Reason about configuration logic and workflows
- Work with de-identified, structural data — not your people’s records
- Configure the AI already inside your platform against this same line
What teams ask before they hand this over.
Do you store our employee data on People Street systems?
No. We operate inside the platforms you license. Your records stay in your system of record; we don’t replicate them into a database of our own to run the service. Where a task needs an export, it’s minimal, time-bound, and deleted when the task is done.
Do you use our data to train AI?
Never. Your data is not used to train any model, ours or a third party’s. We use AI on our own work — documentation, structure, configuration logic — and your employees’ personal data does not go into those prompts.
Who can see our data, and how is that controlled?
Named people on your engagement, each with the least access the work requires, behind multi-factor authentication. No shared logins. When someone rolls off or the engagement ends, their access is removed the same day.
Can we get a subprocessor list and a DPA?
Yes. We’ll share the current list of the systems that touch your data and sign a data processing agreement as part of onboarding. Both are named in your agreement rather than described on a call.
What happens to our data if we leave?
You keep everything — it was always in your systems. We hand over documentation and runbooks written as the work happened, transfer to a named internal owner, and remove our access on a schedule you can see.
A security question we didn’t cover?
Ask it directly. We’ll answer in plain language, share the documents, and tell you where the line is — before you’ve signed anything.