Security

Workspace isolation

Each company's data is separated at the database level, so one workspace cannot read another's records.

Access control

• Roles (Owner, Admin, HR, Manager, Employee) with a per-workspace permission matrix.
• Salary, banking, ID and leave details are protected field by field and checked on the server.
• Confidential profiles hide executive details even from other HR users.

Files and secrets

• Documents are stored privately; downloads use short-lived, authorised links.
• Uploaded files stay quarantined until they can be checked.
• Integration credentials are encrypted and never sent to the browser.

Audit trail

Approvals, permission changes, sensitive edits and exports are recorded with who did what and when.

Reporting a vulnerability

If you find a security issue, email us with details. Please give us reasonable time to fix it before sharing it publicly.