Security & trust
HR data is the most personal data a company holds
Salaries, passports, medical documents, disciplinary cases — HumanR exists to hold exactly the records that must not leak. This page explains how the product protects them, in the same plain language we use everywhere else.
Role- and permission-based access
Access is granted by role and permission down to individual modules and sensitive fields. Payroll figures, HR cases and personal documents stay on a need-to-know basis — a site supervisor and a payroll officer see very different systems.
Sensitive fields masked — and access logged
Salary figures and other sensitive values are masked for anyone without the specific permission to see them, and access to sensitive data is itself recorded. Looking is an event, not a habit.
A full audit trail
Who changed what, and when — recorded across the system, from a corrected attendance punch to an approved salary increment. When an auditor asks, the answer is a report, not a shrug.
Encrypted in transit
All traffic between your browser, your biometric devices' punches and the system travels over encrypted connections.
Your data stays yours
Every list in the system exports to a file you own. If you ever leave, you leave with your data — no export fees, no hostage formats.
Demo companies are fiction
The self-serve demo runs on fully seeded, fictional companies. Exploring the demo never touches a real customer's data, and nothing you do in a demo company leaks anywhere.
The straight answers section
Security pages love logos. Here is ours, in words: we would rather tell you plainly what we do and don't have than decorate this page with implications.
Are you SOC 2 or ISO 27001 certified?
Not yet. When we complete a certification it will be listed here with the report available on request — until then, we won't imply otherwise with badge-shaped graphics.
Running a vendor security assessment?
Send us your questionnaire. We answer every line honestly, including "not yet" where that is the truth, and we answer fast.
Found a vulnerability?
Report it and we will take it seriously — see the disclosure contact below. We commit to acknowledging reports quickly and to not pursuing anyone acting in good faith.
Report a security issue
Email hello@humanr.online with “Security” in the subject line. Reports go straight to the people who can fix them. See also our privacy policy.
See how access control feels in practice
Request a demo and we'll email you a personal login to a fully loaded demo company — explore real screens with realistic data within minutes.
No credit card. No sales call required. A real login, emailed to you.