Security
Your organization's HR data is sensitive by nature — here's how it's protected.
Encrypted everywhere
Every connection runs over HTTPS/TLS. Sensitive endpoints — authentication, personal data, anything organization-specific — add a second layer of payload encryption on top, so data stays protected even if transport security were ever compromised.
Role-based access
Every person's access is governed by their role — what they can view, create, edit, delete or approve. Nothing is open by default; access is granted deliberately, and can be adjusted for a single person without affecting anyone else.
Your organization's data stays yours
Each organization's records are kept logically separate from every other organization on the platform. Every request is scoped to the organization the signed-in user belongs to.
Secure sign-in
Passwords are never stored in plain text — they're hashed with Argon2id, a modern, purpose-built password-hashing algorithm. Sign-in can optionally require a one-time code as a second factor.
A record of what happened
State-changing actions are logged, so your admins can see who did what and when — useful for both day-to-day oversight and after-the-fact review.
Built for compliance
Data handling follows the principles of India's Digital Personal Data Protection Act, 2023 — data is collected for a stated purpose, access is limited to what's needed, and retention follows a defined schedule.
Reporting a concern
If you believe you've found a security issue, or have a question about how your data is handled, contact support.oyehr@gmail.com. See also our Privacy Policy for how personal data is collected, used and retained.