Security and privacy, built in from the first line of code.
We engineer performance intelligence on a foundation of explicit role boundaries, strict tenant segregation, and encrypted infrastructure.
Authentication
Every request is authenticated through Auth0 with verified tokens; login attempts are rate-limited to protect against brute-force attacks.
Tenant Isolation
Every organisation's data is isolated and strictly enforced at the API layer, preventing cross-tenant leakage across all queries and operations.
Role-Based Access Control
Granular permissions for super admins, HR admins, executives, managers and employees; private manager notes stay strictly private.
Audit Trail
Sensitive actions, permission changes, flag transitions, and data exports are logged with immutable audit records.
Infrastructure
Hosted on AWS in Mumbai (ap-south-1); database connections are encrypted in transit (TLS); integration credentials are encrypted with AWS KMS and stored in AWS Secrets Manager.
Data Protection
Built to support compliance with India's Digital Personal Data Protection Act, 2023.
Need a security questionnaire completed?
Our technical team provides architectural documentation and answers vendor assessment questionnaires.