Security
HR decides who sees what
Access to each section is set by role, department or person. What data a page can show is checked by the server, and every sensitive change is logged.
Access Control
A tick-box matrix of sections and roles, plus department and employee overrides.
- Employee setting beats department, department beats role
- HR Head and Super Admin always keep full access
- Every change is written to the audit log
Protection
Built in from the first sign-in
Data scope by roleOwn, team, department or all — enforced on the server, not just hidden in the menu.
Sensitive fieldsSalary, bank and ID numbers only for HR, Finance and the employee.
Secure sign-inHTTPS, personal passwords stored hashed, lock-out after repeated failed attempts.
SessionsExpire after inactivity; sign out from any device.
Audit logWho changed what and when, for every sensitive action.
BackupsThe database is saved continuously, with 30 daily backups kept.
Punch integritySelfie with face check and location on every punch; photos kept for review.
Email controlTest inbox mode and a one-click pause for all automatic emails.