# Personio — HRIS API: overview

> Canonical URL: https://developers.apideck.com/apis/hris/personio/overview

Always be on top of your HR management. With a holistic HR and applicant management software designed for companies with 10 to 1000 employees.
- Status: live
- Authentication: oauth2

- **authentication note:** Each consumer's Personio administrator generates a Client ID and Secret in their own Personio account. Nothing for you to register.
- **webhooks:** Virtual webhooks (Apideck polls for employee created, updated and terminated events)
- **partnership url:** https://www.personio.com/partner/tech/
- **sandbox available:** true
- **important to know:** Access is scoped at credential creation: the administrator picks which resources are readable or writable and which employee attributes are exposed, so a credential created too narrowly returns partial or empty data.
Personio can exclude individual employees from API transfer. An 'Include in transfer' field on each employee record governs whether that person is shared, so a consumer's own configuration can legitimately hide records from your integration.
Personio's 1 December 2026 cutoff for passing API credentials as query-string parameters does not affect this connector: it already sends them in the request body, so nothing changes for you.
- **consumer access level:** Administrator: only a Personio administrator can generate the API credentials.
- **sandbox url:** https://www.personio.com/partner-trial/
- **apideck credentials available:** false
- **partnership note:** Apideck is already an approved Personio iPaaS partner. Personio's free Tech Partner programme is optional and adds a Marketplace listing.
- **difficulty reason:** Consumer-Supplied API Credentials Instead of a User-Consent OAuth Flow
- **rate limits:** 2,000 requests/minute per IP overall, with tighter per-endpoint caps (300/minute on the employee list); HTTP 429 beyond either.
- **costs:** No separate API fee; the API requires the Core Pro plan, whose pricing is quote-based.
- **account type required:** A Personio account on a plan that includes API access (Core Pro at the time of writing).
- **difficulty:** moderate
- **supported resource categories:**   - **resources:** employees
time-off-requests
  - **name:** People
- **environment notes:**   - **description:** Personio uses the same credentials for testing and production: the Client ID and Secret a consumer's administrator generates, with no separate sandbox host or credential type. Apideck cannot supply temporary shared test credentials for this connector, because every connection uses credentials the consumer generates themselves. A trial or sandbox account will not mirror a specific consumer's plan, access levels or attribute settings, so take care when testing against live HR data.
  - **environment:** Single environment
- **apideck credentials note:** Each consumer supplies their own Personio API credentials.
- **responsibility matrix:**   - **customer:** Share the plan requirement
  - **area:** Personio account on a plan with API access
  - **consumer:** ✓
  - **apideck:** Instructions provided
  - **area:** Generate API credentials
  - **consumer:** ✓ (administrator)
  - **consumer:** ✓
  - **area:** Choose access levels and readable attributes
  - **customer:** State what the integration needs
  - **customer:** Implement Vault
  - **consumer:** ✓
  - **area:** Enter Client ID and Secret in Vault
  - **area:** Token exchange and refresh
  - **apideck:** ✓
  - **area:** Build via the Unified API
  - **apideck:** Maintains the connector
  - **customer:** ✓
  - **area:** Connection sync
  - **apideck:** ✓ Polls via virtual webhooks
  - **area:** Monitor connections
  - **apideck:** Logs and alerts
  - **consumer:** Can revoke the credentials
  - **customer:** ✓ Via the Apideck Dashboard
- **partnership required:** false
- **sandbox note:** Free, self-service Partner Developer Account from Personio's partner trial. A Personio free trial or a consumer's own account also work for testing.

## Supported resources

- **downstream name:** Employees
- **custom field support:** true
- **downstream id:** employees
- **id:** employees
- **status:** live
- **name:** Employees
- **id:** time-off-requests
- **downstream name:** Time Offs
- **status:** live
- **downstream id:** time-offs
- **name:** Time Off Requests
- **custom field support:** false

An omitted operation list does not establish operation support. Verify the selected operation in the coverage matrix.

[API reference](https://developers.apideck.com/apis/hris/reference.md) · [Coverage matrix](https://developers.apideck.com/apis/hris/coverage)