One company cannot see another's data
Every record carries the company it belongs to, and every query is
filtered by that in one place rather than screen by screen. It fails
closed: a request that cannot say which company it is for returns
nothing at all rather than everything. Tests run on every change to
prove one company cannot list, open or query another's people.
To be precise about what that is and is not: the separation is
enforced in the application on a shared database, not by giving each
company a database of its own. That is the common arrangement for
software of this size, and it is the thing to ask us about if your
own policy requires something stronger.
Payslips are encrypted
A payslip leaves as an encrypted PDF, and the password is never in
the email that carries it. The employee reads the password on their
own page, behind their own login.
Backed up nightly, off the server as well as on it
A dump every night, kept two weeks on the machine and ninety days
encrypted off it. The key that decrypts the off-site copies is
deliberately not on the server, so a copy of the server is not a copy
of your data.
There is a documented drill for restoring one into a scratch
database, and it runs by hand rather than on a schedule. We would
rather say that than imply a cadence nobody is keeping.
Where it runs
On a dedicated server in Manchester, United Kingdom, encrypted in
transit. That is where the machine is today, which is a fact rather
than a guarantee about where it will always be. If you need data
residency written into an agreement, ask: we will either put it in
writing or tell you we cannot.
Every change is on the record
Who changed which field, when, and what it was before. National
identity and bank account numbers are recorded as changed with the
values masked, so the log never becomes a second copy of them.
Your data stays yours
We do not use it to build, train or improve anything. We do not share
it and we do not sell it, and nobody here looks at it except where
you ask us for help with a fault.
We will sign your confidentiality agreement before you send us
anything, or send you ours if you would rather start from one. Ask at
info@workmintpeople.com.
We do not hold a security certification. Saying otherwise would be easy
and untrue, so the paragraphs above describe what the software does
instead, and you are welcome to ask harder questions about any of it.
