Security
People records are private. Here is how we keep them that way.
Each office sees only its own
The database itself decides who can see each row. HR of one office cannot see another office's staff. We test every rule by breaking it on purpose.
Signing in
- Passwords of at least 12 characters. Common passwords are refused.
- A new device needs a six digit code sent by email.
- Many failed tries from one place are slowed down.
We keep less
We do not hold salaries, bank accounts, tax numbers or ID numbers. What we do not keep cannot leak.
Backups
Every night the data is backed up, locked with a key, and copied to separate storage. The key is not kept on the server.
A record of changes
Changes to staff and leave are recorded, with who made them and when. So is every office switch by group HR.
Where it runs
On one server in Singapore. The database cannot be reached from the internet.
Have a security question?
Ask us