Access and transport
The public website uses HTTPS. Passwords are hashed, session tokens expire, and administrative requests check company membership and role. Employee views are scoped to the signed-in person’s records.
Sensitive capabilities are restricted
Public company-agnostic PIN kiosks are disabled. Platform-wide partner administration and customer inquiry records are not available to ordinary company accounts. Privileged invitations require owner approval.
Backups are not a magic guarantee
A daily local database archive is configured and its archive structure has been checked. That is not the same as encrypted off-site disaster recovery or a completed restoration rehearsal. Keep independent required payroll records during the pilot.
Current release limits
Transactional email, paid billing, approved native app-store distribution and validated offline punches are not enabled as production services. A native Android beta is for controlled tests only. No blanket compliance certification, SOC 2 claim or guarantee of perfect security is made.
Report a concern
Use the contact form to report suspected unauthorized access or a privacy concern. Describe the affected page and company without including credentials, session tokens or employee payroll records.