Overview
HiBob (commonly known as "Bob") has gained traction as a modern HRIS platform designed for mid-size and scaling companies, particularly those with distributed or hybrid workforces. When HiBob's scripts appear on third-party websites, they serve a specific recruiting purpose — embedding career portals and job listing widgets that let companies showcase open positions and accept applications directly on their corporate sites.
This is a common pattern among HR platforms: the core product is a SaaS application, but the outward-facing component is a career page integration.
What This Script Does
HiBob's career page scripts provide recruiting functionality on employer websites:
- Job listing rendering: Pulls open positions from the employer's HiBob recruiting module and displays them in a formatted widget, showing job titles, departments, locations, and descriptions
- Application forms: Embeds interactive forms where candidates submit personal information, upload CVs/resumes, and answer custom screening questions configured by the employer
- Session management: Sets cookies to maintain application state, allowing candidates to navigate between listings and their in-progress applications without losing data
- Candidate data collection: Captures applicant details including names, email addresses, phone numbers, work history, education, and any custom fields the employer has configured
- File upload handling: Manages CV and document uploads, transmitting files securely to HiBob's infrastructure
The scripts load career portal assets from HiBob's CDN and communicate with HiBob's API to pull job data and submit applications.
Consent & Compliance
HiBob's career widgets handle sensitive applicant data with specific considerations:
- GDPR: Candidate applications involve personal data processing with HiBob as a data processor. The lawful basis is typically the candidate's consent or pre-contractual steps (Article 6(1)(b)). Session cookies for the application flow likely qualify as strictly necessary.
- ePrivacy Directive: Cookies maintaining application session state support a service the visitor explicitly requested (submitting a job application), placing them in the strictly necessary category.
- CCPA/CPRA: Applicant data collected through HiBob's forms falls under employment-related personal information. While CPRA provides certain exemptions for employee and applicant data, a privacy notice at collection is still required.
Employers should ensure their careers page includes appropriate privacy disclosures about data processing through HiBob.
Should You Block This Without Consent?
HiBob's career page widgets serve a clear functional purpose that visitors deliberately engage with — searching for and applying to job openings. The data collection is limited to what candidates voluntarily provide as part of the application process. Session cookies maintain application state for a service the visitor explicitly requested. Blocking these scripts would prevent candidates from applying for positions on your site.
No.
Is HiBob GDPR compliant?
HiBob typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So HiBob can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads HiBob, not on HiBob itself.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
hibob.comFunctionalhibob.com is a functional domain operated by HiBob, used to run site features like chat, video, embeds, and preferences.
Frequently Asked Questions
Related Vendors
Manage consent for HiBob
ConsentStack automatically detects and manages HiBob trackers so your site stays compliant with global privacy regulations.