Bob
Connect Bob to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Bob to sync people, employment status, start and end dates into the personnel register.
| Category | HRIS |
| Connect with | API token |
| What a connection produces | People sync |
| Bob's guide | apidocs.hibob.com |
Connect with an API token
-
In Bob:
- In Bob, open the Service Users configuration page. If you do not have access to it, ask a Bob Admin to generate the credentials for you.
- Create a new service user for Safeguard.
- Copy the ID and the token now; the token can only be copied when it is generated.
- Create a dedicated permission group and add the Safeguard service user to it.
- Under People's data, in the people's fields permissions, grant View (not Edit) for the Root, Work, Payroll and Employment categories.
- Leave the access scope at all active employees (the default).
Where to find the other values:
- Service user ID: Shown with the token when the service user is created on the Service Users page.
Bob shows the secret only once, so copy it before you leave the page.
Bob's public documentation does not cover every step.
HiBob: 'You can only copy the token when it's generated. If lost, generate a new one.' The fetched page does not give the menu path to the Service Users page or the button labels.
Source: apidocs.hibob.com, checked 2026-10-07.
The permissions Safeguard needs:
View: Root, Work, Internal, Payroll (Employment). -
On Compliance › Connectors, open Bob, click Connect, choose API token and fill in:
Field What to enter Service user ID Required. Create under Settings → Integrations → Service users; give it read access to People and Lifecycle fields. Service user token Required. Stored encrypted and never shown again. -
Click Connect with token.
Frameworks
Safeguard's automated tests read Bob and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC1.3, CC2.1, CC6.2 | 1 |
| ISO/IEC 27001 | Automated tests | A.5.16 | 1 |
| HIPAA Security Rule | Automated tests | 164.308(a)(3) | 1 |
| NIST CSF 2.0 | Automated tests | GV.RR-04, PR.AA-01 | 1 |
These tests are switched on per workspace by the Safeguard team.
HiBob connect to the same provider as Bob, and these tests run for a connection made through any of them.
Related
- HRIS connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks