Trust Center
Personio Trust Center
Data protection and information security are at the core of Personio’s products and services. Protecting your data and earning your trust is pivotal for us.
It is with our customers in mind that we implement a comprehensive security program and a wide array of controls, policies and third party assurance, including ISO 27001 certification, to keep your most sensitive data safe and sound. It also means that we continually work on enforcing these measures, keeping us in line with the latest industry standards, European data processing regulations, and global security threats.
Statista
Polaroid
Spendesk
Lepaya
Blue Banana
Brooklyn Fitboxing
Trust Center Updates
Critical updates for PHP vulnerabilities
Update on PHP2Shell (CVE-2026-109618, CVE-2026-109619 and CVE-2026-115560)
As of October 21, Personio has patched its production environment against the PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, by upgrading to the fixed PHP release. Personio has also secured its PHP configuration against the related vulnerability CVE-2026-115560, disclosed on October 23. Services remained online throughout under heightened monitoring. No evidence of exploitation or impact have been found. Monitoring continues, and this statement will be updated should that assessment change.