Security approach
EN-Time HR handles sensitive administrative and employment information. The production deployment should use HTTPS/TLS, tenant-specific authorization, access controls, secure password/token handling, validation, database and backup protections, audit trails, monitoring and incident response. These are intended controls and must be verified against the live deployment.
Operational safeguards
- Strict company/tenant isolation and role-based authorization on every data endpoint.
- Least-privilege infrastructure credentials, managed secrets and restricted administrator access.
- Secure handling of attendance photos, optional location records and payroll documents.
- Backups, recovery tests, monitoring, vulnerability management and supported dependencies.
- Documented staff access, third-party contracts and incident response procedures.
Report a security concern
Report suspected vulnerabilities or personal-data exposure privately to [email protected] . Do not send live payroll files or personal identification data in initial reports.
Certifications
No ISO, SOC 2, GDPR certification or guaranteed uptime is claimed on this page. Independent certifications, if later obtained, should be listed only after verification.