Your people data, fully protected
Employee data is sensitive. We store the minimum, encrypt everything, audit all access, and never sell your data.
Continuous monitoring
Platform monitors controls for security, availability, and confidentiality on the SOC 2 Type II control framework. Audit packages available under NDA once certification is in scope.
Data residency & GDPR tooling
Data-processing agreements, consent management, right-to-erasure flows, and data-portability exports built in. EU data resident in eu-west-1.
Encryption everywhere
AES-256 encryption at rest, TLS 1.3 in transit. Database-level encryption with customer-managed keys available on Enterprise.
Audit-ready logging
Immutable audit trail of every data access and mutation. Searchable, exportable, and retained per the configured retention window.
Infrastructure resilience
Hosted on AWS with multi-AZ redundancy across us-east-1, eu-west-1, and ap-southeast-2. Daily encrypted backups with point-in-time recovery.
Role-based access
Granular permissions by role, department, and data type. SSO enforcement via SAML 2.0 with SCIM 2.0 provisioning.
Need our control documentation or security questionnaire?
Request security docs