Graded B+ on resilience. In Vannus's assessment it has not disclosed which model it runs — resilient — owns model IP or routes across providers.
HR operating system for European SMEs — core HR records, recruiting, payroll and an AI assistant layer over HR data. The vendor's security page states data is stored in Frankfurt and does not leave the EU, and that Personio is ISO 27001 and BSI C5 certified and GDPR compliant. AI-powered features can be switched off by the customer in settings. No public statement was found on whether customer HR
Not disclosed. Personio does not publish which model it runs, so this criterion is excluded and the grade rests on what we could verify. We say so rather than guess.
Not yet assessed. We publish a sovereignty position only where the vendor documents one — we do not infer it from a domain or a company name.
Vannus grades Personio against nine dimensions of trust — data sovereignty, training privacy, compliance posture, operational resilience, exit portability, and more. The heaviest criterion asks whether the tool builds its own AI or resells someone else's model; where the vendor discloses it, the grade cites the vendor's own documentation. No paid placements — scoring is walled off from affiliate revenue. See the methodology →