Security & Data Protection

🔐

Data Encryption

AES-256 at rest, TLS 1.3 in transit. Every layer.

🏛️

Data Residency

Caribbean clients may elect regional data residency to comply with local DPA requirements.

👤

Role-Based Access

Granular RBAC. HR staff, managers, and employees see only what they are authorised to see.

🔍

Full Audit Trails

Every action — record edits, payroll runs, case updates, sign-offs — logged with timestamp and user identity.

🔄

Backups & Recovery

Daily automated backups, point-in-time recovery, RTO under 4 hours on Growth and Enterprise.

🛡️

Penetration Testing

Annual third-party pen testing and quarterly vulnerability scans of all production infrastructure.

🔑

MFA & SSO

MFA enforced for all users. SAML/SSO available on Enterprise plans.

📋

Incident Response

24-hour response SLA for security events. All customers notified within 72 hours of a material breach.

SOC 2 Type II (In Progress)ISO 27001 AlignedDPA (Jamaica) CompliantCCPA Ready99.9% Uptime SLA

Responsible Disclosure

If you have found a security issue, email [email protected]. We acknowledge all reports within 24 hours and resolve critical issues within 72 hours.

Questions about our security posture?

Security is not an afterthought here either.

Talk to our security team about your organisation's specific requirements.