Security and Privacy
Employee information, protected and controlled
These are the protections that exist in the product today. We list only what is real.
Verified capabilities
What protects your data
Multi-tenant architecture
Every company works in its own space. Employees, payroll and documents belong to one company and are never mixed with another.
Database-level data isolation
Row-level security in the database separates companies, and automated tests try to read across companies to prove it cannot happen.
Multi-factor authentication
One-time codes at sign-in, with step-up verification for sensitive actions.
Password controls
A strong-password policy, throttling of repeated attempts and protection against timing leaks.
Role-based access
Built-in and custom roles decide what each person can do.
Data access scope
Access can be limited to oneself, a team or the whole company.
Field-level permissions
Sensitive fields such as pay and identity numbers can be restricted separately from the rest of a record.
Audit logging
Changes are recorded with who, what and when.
Single sign-on and SCIM
SAML 2.0, OpenID Connect and SCIM 2.0 provisioning for organisations with an identity system.
Read-only API keys
Keys are stored hashed, shown once, scoped and revocable, and expose no pay, bank, ID or contact data.
Data-subject requests
A workflow to handle requests about personal data.
Encryption of sensitive data
Sensitive values are encrypted with a key per company.
What we do not claim
Honest limits
If your procurement process needs evidence, ask us what we can provide. We will tell you plainly what exists.
Questions about security?
Ask during a demo or send us a message.