Security

Product Security

Password security:

Strong Password Enforcement: All users are required to create passwords with a minimum of 8 characters, including a mix of uppercase and lowercase letters, numbers, and symbols. This helps in safeguarding accounts against unauthorized access.

Password Encryption: We use bcrypt for password encryption. This advanced security measure ensures that all passwords are stored in an encrypted format, enhancing the overall security of user accounts.

Permissions and access control:

Customisable access controls allow you to define and manage who has access to various levels of information within your organisation. This granular control helps in maintaining the integrity and confidentiality of employee data.

Best practices for security:

We recommend limiting account access to authorised company employees and regularly updating passwords to maintain a high level of security whilst using 2FA.

Network Security

Data hosting and management:

Our services are hosted on secure, cloud-based platforms with strict access controls. Only authorised personnel have access to production data.

Regular data backups:

We perform regular data backups to prevent data loss and ensure data availability in case of unforeseen circumstances.

Data encryption:

All data in transit and at rest is encrypted, providing an additional layer of security to your data.

Additional Security Features

End-to-end encryption for sensitive data:

Sensitive employee data, such as bank details and salary information, is protected with end-to-end encryption. This means that such data is encrypted from the point of origin to the point of destination, ensuring its confidentiality and integrity.

Employee security training:

Our employees undergo annual security training to stay updated with the latest security protocols and best practices.

Confidentiality agreements:

All employees sign confidentiality agreements as part of their employment contracts to ensure the safeguarding of any sensitive information they might handle.

PCI Compliance:

We adhere to Payment Card Industry (PCI) standards for all payment processing, ensuring the security of financial transactions.

Security Inquiries and Reporting Vulnerabilities

We are committed to maintaining the highest standard of security. If you have any security-related questions or wish to report a potential vulnerability, please contact our security team at [email protected].