Ashby compliance, automated for SOC 2, ISO 27001 & GDPR
OneClickComply checks how Ashby is configured, collects the evidence your auditor asks for and maps it to SOC 2, ISO 27001, Cyber Essentials and GDPR. No spreadsheets, no screenshots.
SOC 2 · ISO 27001 · Cyber Essentials · UK GDPR
- Set up in minutes
- No API keys or extra logins
- Evidence collected continuously
- Built for UK teams
Continuous control checks
What OneClickComply checks in Ashby
Recruiting tools hold candidate personal data, often for longer than they should. Retention and access controls matter under GDPR.
Candidate data deleted after the retention period
Hiring-team access scoped by role
SSO or MFA enforced
See it work
Watch OneClickComply check Ashby
The Companion, our AI browser agent, opens Ashby with the access you already have, reads the settings that matter, tests them against your controls and files the result as evidence.
Ashby admin
Security settings
- Candidate data deleted after the retention period
- Hiring-team access scoped by role
- SSO or MFA enforced
OneClickComply Companion
- Opened Ashby with your existing session
- Reading users, candidate data retention, roles
- Candidate data deleted after the retention period
- Hiring-team access scoped by roleGap found, fix it in one click with OneClickFix
- SSO or MFA enforced
Evidence saved and mapped
Ashby evidence, collected automatically
The Ashby evidence auditors ask for, captured on a schedule and stored against the right requirement. No more screenshots the week before the audit.
- Users
- Candidate data retention
- Roles
- Audit log
Mapped to your frameworks
Every Ashby check is mapped to the controls it satisfies, so one piece of evidence counts everywhere it applies.
- UK/EU GDPR Art. 5, 17
- ISO 27001 A.6.1
- SOC 2 CC6.1
Set up in minutes
How to connect Ashby to OneClickComply
- 1
Add the browser extension
Install the OneClickComply Companion, our AI browser agent. There's no API key to create and nothing to change in your stack.
- 2
Open Ashby as normal
The Companion reads Ashby's admin settings that matter for compliance, using the access you already have. No extra logins.
- 3
Fix it in one click
Settings are checked against your controls and the evidence is stored. When something fails, OneClickFix can correct it in Ashby for you, with the change logged as evidence.
See Ashby checked live against your controls.
Ashby security & compliance FAQs
How does OneClickComply connect to Ashby?
Through the OneClickComply Companion, our AI browser agent. It reads Ashby's admin settings using the access you already have, so there's no API key to create and no extra login. When a setting fails a check, OneClickFix can correct it for you.
Is Ashby GDPR compliant?
No tool is GDPR compliant on its own. It comes down to how your organisation configures and uses Ashby: who can access personal data, how it's shared, how long it's kept and whether you've got a data processing agreement in place. OneClickComply checks those settings in Ashby and keeps the evidence for you.
Does Ashby have a SOC 2 report?
Check Ashby's own trust or security page, and request their report as part of vendor due diligence. Either way, your auditor will still want evidence that you've configured Ashby securely. OneClickComply collects that evidence and can track Ashby as a vendor in your risk register.
What Ashby evidence do auditors ask for?
For Recruiting & ATS tools, auditors usually want users, candidate data retention, roles and audit log. OneClickComply captures it on a schedule, so it's ready before they ask.
Which frameworks does the Ashby integration cover?
Ashby evidence is mapped to GDPR, ISO 27001 and SOC 2. Cyber Essentials and the rest of your frameworks are covered by the same platform.
Also connects with
Ashby alternatives we integrate with
Comparing Ashby with other Recruiting & ATS tools, or using more than one? OneClickComply connects to these too, so your evidence stays in one place whichever you choose.
Get Ashby audit-ready this week
OneClickComply connects to Ashby and the rest of your stack, collects the evidence and tells you exactly what to fix. If it has a web admin console, we can work with it.
Logos provided by Logo.dev. All product names and logos are trademarks of their respective owners.