Security
Your HR data is protected.
Biometric attendance and pay: two kinds of data an institution does not hand over lightly. Here is, concretely, how we protect them.
Encryption
All data is encrypted in transit (HTTPS, TLS 1.3) and protected at rest. Biometric templates only travel and are only stored encrypted: never in clear.
Strong authentication
Two-factor authentication with one-time codes, compatible with Google Authenticator, Authy and standard apps. Recovery codes restore access if a device is lost.
Access control
Each role sees and does only what it strictly needs. The audit log records sign-ins, sensitive changes and administrator actions.
Hosting and backups
Hosted in DR Congo or on your own servers, with redundancy, automatic backups and a recovery plan. Your data is never shared without your consent.
01The path of a clock-in
From the employee’s finger to the payslip.
At every step the data is protected, and every action leaves a trace.
- Terminal
The employee is identified
Recognition happens on the terminal, without waiting for the server.
- Transmission
Encrypted sending
The clock-in travels encrypted to the platform, with nothing opened on your network.
- Platform
Partitioned storage
Each entity has its own data, isolated from all the others.
- Use
Traced access
Who viewed, corrected or approved: everything is written to the log.
02Roles and permissions
Each their own rights, nothing more.
Four default roles, adjustable entity by entity.
| Role | Scope | Clock-ins | Approval | Payroll | Settings |
|---|---|---|---|---|---|
| Super Admin | Creates entities and oversees everything | Yes | Yes | Yes | Yes |
| Entity admin | Runs a department, campus or subsidiary | Yes | Yes | Yes | Yes |
| Manager | Follows and approves for their team | Yes | Yes | No | No |
| Employee | Views their own data | Yes | No | Yes | No |
For employees: their own clock-ins and their own payslips only.
A question from your IT team?
We answer security questionnaires and walk your technical teams through the architecture during the demo.