Corporate Security & SLA

Privacy Policy &
Dossier Protection

Effective Date: June 13, 2026. We are committed to safeguarding corporate identity registers, employee profile details, and telemetry logs.

1. Information We Collect

We collect account details (company names, domain handles, owner profiles) and operational tenant data (employee database rosters, attendance coordinates, leaves balance ledgers, and document control mandates). Information is stored solely to provide core HR services.

2. Cryptographic Security & Locker Encryption

Sensitive employee documents are stored securely using AES-256 encryption within our Document Locker. Access to employee change request files and passport uploads requires explicit HR permission and JWT verification.

3. Data Residency & Isolation

Each organization operates in strict data isolation to prevent cross-tenant information leaks. Our servers run database transactions locally and do not share details with third-party advertising networks.

4. Third-Party Sub-processors

We use verified sub-processors for essential messaging triggers: ZeptoMail for system notifications/OTPs and Fast2SMS for mobile SMS verification codes. Payment details are handled securely by Easebuzz without touching our core servers.

5. Your Control & Access Rights

Administrators can edit profiles, modify location setups, or export candidate rosters via CSV. Employees can submit change requests to update their emergency contacts or phone numbers in a transparent, audited flow.