Security & Technical Safeguards Overview
Comprehensive technical breakdown of encryption, logical tenant separation, RBAC matrices, and operational safeguards protecting your workforce data.
LEGAL NOTICE & CUSTOMIZATION ADVISORY
This policy contains baseline provisions tailored for a B2B Human Resource Management System (HRMS) handling payroll, biometric attendance, tax, and employee records under India's Digital Personal Data Protection Act, 2023 (DPDPA) and global privacy frameworks (including GDPR). Bracketed values such as [COMPANY_NAME], [PRIVACY_EMAIL], and statutory grievance officer details must be verified by qualified legal counsel prior to commercial execution.
At omniHR, we engineer our software under a strict Zero-Trust architecture: Never Trust, Always Verify. Because our HRMS processes sensitive compensation figures, bank coordinates, and employee personal files, every internal microservice request, API call, and administrative action is continuously authenticated, authorized, and logged.
All database storage volumes, file attachments, payslips, and database backups are encrypted at rest using AES-256 GCM encryption keys managed through an enterprise Key Management Service (KMS) with automatic annual key rotation.
All communications between user browsers and our cloud endpoints mandate TLS 1.3 (or TLS 1.2 minimum) utilizing strong Elliptic Curve Diffie-Hellman (ECDHE) ciphers and HTTP Strict Transport Security (HSTS) with preloading.
We provide enterprise-grade identity safeguards for workforce authentication:
- FIDO2 / WebAuthn Hardware Passkeys: Phishing-resistant biometric authentication supporting Apple TouchID, FaceID, Windows Hello, and YubiKey hardware tokens.
- Enterprise Single Sign-On (SSO): SAML 2.0 and OpenID Connect (OIDC) integrations supporting Okta, Microsoft Entra ID (Azure AD), and Google Workspace.
- Mandatory Multi-Factor Authentication (MFA): TOTP authenticator app support with enforced tenant-wide MFA policies for all payroll and HR administrators.
- Impossible Travel Anomaly Defense: Real-time velocity heuristics detecting logins from geographically improbable distances to block stolen session tokens.
Our platform enforces strict logical tenant partitioning and an isolated Dual-Role RBAC Matrix:
Privilege Separation Matrix
Privileges are strictly segregated so that an IT Systems Engineer cannot inspect confidential employee salary records or medical sick notes, while an HR Director cannot alter underlying database schema or network configurations. Row-level tenant filters prevent accidental cross-tenant data queries.
Every critical operation—such as payroll finalization, bank detail mutation, salary export, or employee role escalation—generates an immutable audit record containing:
- Cryptographically verified Actor User ID
- Exact UTC Timestamp
- Originating IP address and User-Agent fingerprint
- Resource target and JSON delta change summary
Our cloud environments are hosted in top-tier data centers provided by [CLOUD_HOSTING_PROVIDER_PLACEHOLDER]:
- Web Application Firewall (WAF): Automated layer 7 inspection defending against SQL injection, cross-site scripting (XSS), and automated bot scraping.
- DDoS Mitigation: Multi-terabit perimeter defense mitigating volumetric network floods.
- VPC Isolation: Databases and internal workers operate strictly within private subnets with no public internet ingress.
Our engineering practices mandate secure code development throughout the software development lifecycle (SDLC):
- Automated SAST & Dependency Scanning: Every Git commit is automatically scanned for static code vulnerabilities and known open-source CVEs.
- Peer Code Review: All production code requires mandatory peer review and branch protection policies before merging.
- Secret Scanning: Git repositories enforce pre-commit hooks to block accidental credential commits.
To protect against catastrophic infrastructure failure:
Target RPO of [< 1 Hour] enabled by continuous transaction write-ahead log replication.
Target RTO of [< 4 Hours] for multi-region container orchestration redeployment.
We maintain a documented Cybersecurity Incident Response Plan (CIRP) covering Identification, Containment, Eradication, Recovery, and Post-Incident Review. In the event of a confirmed breach of customer data, affected tenants will be notified within [24 to 48 hours].
omniHR is architected to align with [SOC 2 Type II / ISO/IEC 27001:2022 / CERTIFICATION_PLACEHOLDER] control standards. Third-party audit reports and independent penetration test executive summaries are made available to enterprise customers under an executed Non-Disclosure Agreement (NDA) once formal attestation cycles are completed.
We welcome responsible security reports from security researchers and customers. Please direct detailed vulnerability findings to security@omnihr.internal. We commit to acknowledging receipt within [24 hours] and providing ongoing remediation updates.