Personio

Teddy connects to Personio with a read-only service account and keeps people evidence current.

What Teddy collects

• Joiners, movers and leavers
• Roles and departments for access reviews
• Confirmation that onboarding and offboarding steps happened

Frameworks and controls

• ISO 27001:2022: A.6.1 Screening, A.6.5 Responsibilities after termination, A.5.18 Access rights
• SOC 2: CC6.2 on provisioning and removing access
• NIS2: Article 21(2)(i) human resources security and access control
• TISAX®: human resources requirements of the ISA

How it works

1. You approve the fields Teddy may read and connect Personio.
2. Teddy compares leavers and role changes with accounts in your other systems.
3. Leavers who still have access, or missing offboarding steps, become tasks.

Access

Read-only, limited to the fields compliance needs.

Does Teddy read salary or personal data?

No. Teddy only reads the fields needed for access and HR security, such as status, start and end dates, role and department.