Each company's data stays its own
Every request is signed in and tied to one company before it reaches any data. Nobody can choose another company's records by changing a link or a request.
- Database reads, updates and deletes are filtered to the signed-in company automatically. A table without a recorded scope is refused rather than allowed.
- Database rules reject any record that would link one company's data to another's, even from scripts that bypass the application.
- Automated checks on every code change look for tables, links or API routes that are missing an isolation decision.
Access that matches each role
- Role-based permissions: HR, managers, payroll operators and employees see and change only what their role allows.
- Multi-factor authentication for user accounts.
- Sign-in attempts and password resets are rate-limited.
- Password-reset and invitation links work once and are stored only as one-way hashes.
Encryption
- All traffic uses HTTPS, with HTTP Strict Transport Security enforced.
- Sensitive employee fields and multi-factor secrets are encrypted at rest with AES-256-GCM. Keys are versioned so they can be rotated without downtime.
Payroll decisions with a history
Preparing a payroll run and approving it are separate steps, so one person cannot prepare and release pay alone. Approvals and changes to employee and payroll records keep an audit trail.
Files and documents
Uploaded files are private to your company. Every upload is checked before it is stored: executables, documents with macros, PDFs with embedded scripts and similar content are rejected. These checks are not a full antivirus product, and we say so.
Backups and recovery
The database has continuous point-in-time recovery, so it can be restored to a moment in time rather than to last night's copy. Our targets are to lose no more than 5 minutes of data and to be back within 2 hours. Restores are rehearsed; the most recent drill passed on 13 September 2026.
Where data is hosted
Today the application runs on Google Cloud Run and the database on Neon, both in the United States (US East). Files are stored in Cloudflare R2 and email is sent through Resend.
Certifications
PeopleOS does not hold ISO 27001 or SOC 2 certification today. We will list a certification here only after it has been issued, with its scope.
Reporting a security issue
If you think you have found a vulnerability, email info@cybzilla.com with the details. Please do not access other people's data or disrupt the service while testing.
Related
Read how we handle personal data in the privacy notice, or see company details.