Security
Your company's data, kept safe
Employee and payroll data is among the most sensitive data a company holds. These are the practices Mosyr actually applies to protect it.
Sign-in and identity
- Passwords are stored hashed with bcrypt, so no one can read them.
- Sessions use signed tokens with a set expiry.
- Automatic sign-out after an idle period your company chooses.
- Mobile app sign-in with fingerprint or Face ID.
- Employees are invited by an email link instead of passing passwords around.
Permissions
- Granular permissions per module and action: view, manage, approve, export.
- Built-in roles, plus custom roles your company creates.
- Multi-step approval chains for leaves, requests, payroll runs and end-of-service.
- Through self-service, an employee sees only their own data.
Tenant isolation
- Each company's data is isolated, and every query is scoped to your company.
- A user in one company cannot reach another company's data.
Encryption and technical safeguards
- All traffic to the platform is encrypted over HTTPS.
- Sensitive integration credentials, such as GOSI link keys, are encrypted with AES-256 before they are stored.
- Security headers on every response, and rate limiting against abuse.
- The sign-up form is protected against bots.
Audit trails
- An attendance audit report: every edit to an attendance record, who made it, when, and the values before and after.
- Replacing an attachment or document is recorded, and the previous file is kept.
- A status history for every employee.
Attendance integrity
- A geofence for every work location where staff punch from the mobile app.
- Punches from faked GPS locations are refused.
- Optionally require the phone's fingerprint or Face ID to punch.
- Refused punches are logged with the reason.
Reporting a vulnerability
If you notice what may be a security vulnerability, email [email protected] with the details. We will handle it confidentially and as a priority.
Ready to Modernize Your HR?