Security and data protection
Built for companies that are trusted with people data.
Tenant isolation
Every record is scoped to its organization and enforced on the server.
Role-based access
Granular permissions, including salary visibility and team scoping.
Audit trail
Who changed what and when, with old and new values.
Hashed credentials
Passwords, API tokens and invitations are never stored in plain text.
Hardened web layer
CSRF protection, strict CSP, rate limiting and secure sessions.
Saudi-first localization
Arabic RTL, country policies, currency, VAT and working week.
Regular backups
The database is backed up automatically every day and can be restored when needed.
Two-step sign-in
Every user can protect their account with an authenticator app code.
For how we handle personal data, see Privacy policy · Contact Us