Are people management software and HR software the same?

They overlap. HR software usually includes payroll and administration; people management software focuses on hiring, performance, development, succession and culture.

Which module should we roll out first?

The one that handles the most frequent and least well-handled decision today. In many companies that is hiring or performance; in a consultancy, the profile report for its clients.

Is the software provider responsible for the data?

No. Your organisation is the controller and the provider is the processor, under a contract that governs its work in line with Article 28 of the GDPR.

Do we have to tell staff that AI is used?

In Spain, if algorithms affect employment decisions, the works council has the right to learn their parameters. Under the EU AI Act, from 2 December 2027 high-risk systems also require informing workers before use.

Does a small business need people management software?

It does once decisions about people keep coming up and are made with scattered data. A few well-chosen modules are already worth it.

People management software: what it should include in 2026

By Deibson Silva · Reviewed on 23 October 2026

People management software should bring hiring, performance, development and culture together in one place, with data you can explain to each person it concerns. In 2026 it also has to meet the GDPR as a data processor and make clear what its artificial intelligence does and who decides.

What is people management software?

People management software is where an organisation runs the life cycle of its people: how it hires, reviews, develops, prepares successors and measures its culture. It is often called HR software, although that label usually also covers payroll and administration.

The distinction matters when you choose. A personnel administration system handles contracts, payroll, holidays and time records. People management software handles decisions: whom to hire, whom to prepare, where to invest in development, which team needs a different way of working. Many organisations need both, and they should talk to each other without one trying to do the other's job.

Which modules should it have?

It should cover the decisions an organisation makes about its people over the year. This is the minimum list worth checking, module by module.

Module	What it handles	What to check in the demo
Hiring	Vacancies, pipeline, interviews and talent pool	That the role profile is defined before candidates are seen
Behavioural assessment	How each person works, decides and what motivates them	That the person receives and understands their own report
360 reviews	Feedback from the people who work with each person	That results are calibrated before the cycle closes
OKRs	Objectives and key results assigned to real people	Regular check-ins with progress and confidence
9-box and succession	Potential, key roles and successors	That every change of position is recorded
Development plans	What each person still needs and how to get there	That the person and their manager agree the plan
Engagement and culture	Anonymous surveys and the lived culture by area	A minimum number of responses before group results show

Why does it matter that everything sits in one place?

Because decisions about people cut across modules. To know who can step into a key role you need their performance, their potential, their behavioural profile and what they still need to be ready. If each piece of data lives in a different tool, someone ends up copying figures into a spreadsheet, with the errors and the extra copies of personal data that come with it.

One place also makes it easier to do something the law asks for: knowing where each piece of data sits, who sees it and what it is used for. The GDPR requires data to be adequate, relevant and limited to what is necessary for each purpose, and data protection to be built in by design and by default. That is easier with one system than with five.

What should it meet on data protection?

The software provider processes your workforce's data on your organisation's behalf, so under the GDPR it is a processor. Article 28 requires you to use only processors that can show appropriate technical and organisational measures, and to sign a contract setting out the subject matter, duration, purpose, type of data and the obligations of each party.

Before signing, ask for four things in writing: the data processing agreement; the list of sub-processors, because Article 28(2) prevents adding others without prior authorisation; the security measures under Article 32 (pseudonymisation and encryption, confidentiality and integrity of systems); and where the data is hosted.

If the software evaluates the performance, personality or behaviour of your workforce, the Spanish data protection authority's list places that processing under the first criterion that calls for an impact assessment when it is combined with another. Ask the provider what documentation it gives you to carry one out. In the United Kingdom, the UK GDPR applies and the ICO publishes guidance on employment data.

What should it explain about artificial intelligence?

It should explain which features use AI, with what data, what they propose and who reviews the proposal. This is not a courtesy: several rules require it.

Rule	What it means for the software	Since
GDPR, Article 22	No decision with significant effects on a person may be based solely on automated processing, with limited exceptions	2018
Spanish Workers' Statute, Article 64.4.d	The works council may learn the parameters, rules and instructions of algorithms that affect employment decisions, including profiling	In force
EU AI Act, Article 5(1)(f)	Inferring people's emotions in the workplace is banned, except for medical or safety reasons	2 February 2025
EU AI Act, Article 4	Deployers take measures to support AI literacy among their staff	Wording of Regulation (EU) 2026/1744
EU AI Act, Annex III point 4 and Article 26(7)	Hiring, employment decisions and performance evaluation with AI are high-risk; the employer informs workers' representatives and staff before use	2 December 2027

How do you check who decides?

You check by looking at what happens after the system makes a proposal. Ask to see three moments in the demo: when the system orders candidates, when it proposes a person's position on the 9-box and when it flags an objective at risk.

In each case the question is the same: can a person change the proposal, is it recorded who changed it and why, and can the person affected ask for an explanation? The Spanish regulator's guidance on employment points out that human involvement has to be meaningful, carried out by someone with the authority and competence to change the decision, and not a token gesture.

Which questions should you ask the provider?

These questions separate a tool you can defend in front of your workforce from one that only looks good in a demo.

Are prices published, and what does each plan include? Can I export my data in a reusable format if I leave? What minimum number of responses applies before group results are shown? Which features use AI and which do not? Can I see the report exactly as the person assessed will see it? Who on your side can access my data, and when? What happens to the data when the contract ends?

If you are a consultant or a consultancy, add one more: can I deliver reports under my own brand and manage several client companies in one dashboard without mixing their data?

How much does people management software cost?

It depends on the modules and on the type of customer, which is why prices should be published before the first meeting. iPersonality publishes them, excluding VAT, for practitioners, consultancies, companies, institutes and licensees, with monthly and annual plans.

Sources

Frequently asked questions

Are people management software and HR software the same?: They overlap. HR software usually includes payroll and administration; people management software focuses on hiring, performance, development, succession and culture.
Which module should we roll out first?: The one that handles the most frequent and least well-handled decision today. In many companies that is hiring or performance; in a consultancy, the profile report for its clients.
Is the software provider responsible for the data?: No. Your organisation is the controller and the provider is the processor, under a contract that governs its work in line with Article 28 of the GDPR.
Do we have to tell staff that AI is used?: In Spain, if algorithms affect employment decisions, the works council has the right to learn their parameters. Under the EU AI Act, from 2 December 2027 high-risk systems also require informing workers before use.
Does a small business need people management software?: It does once decisions about people keep coming up and are made with scattered data. A few well-chosen modules are already worth it.