Separation between organisations
Every record belongs to one organisation and database rules enforce that boundary on every query, so one organisation can never read another’s data.
Access by role
Roles decide what each person can see and do. Sensitive areas such as pay, performance and recruitment have their own, narrower controls. Administrators can see who changed what in the audit log.
Files and uploads
Files are stored privately. Documents uploaded through the public careers page are scanned for malware before a person can open them.
Hosting and transport
Data is encrypted in transit and at rest. Production data is hosted in Sydney, Australia.
Backups and recovery
Your data is backed up every day. If we ever had to restore it, you would get back to the last daily backup, which means up to 24 hours of changes could be lost.
A shorter recovery point is available on request and is priced separately.
Found something?
If you believe you have found a security issue, please contact us straight away and we will look at it promptly.