Security
Salaries, bank details, PAN numbers. Treated that way.
HR data is some of the most sensitive information a business holds. Here is what WeHR does to protect it, written plainly, and only what the product does today.
Each company kept apart
- Every company’s records are separated inside the database itself, not only in the screens, a request for one company can’t read another’s.
- Branch logins (Pro) are limited the same way: a branch HR sees only their branch’s people.
- Automated tests check this separation before every release.
Signing in
- Two-step sign-in with an authenticator app, or a code by email or SMS, and you can make it compulsory for admins or for everyone.
- Repeated wrong passwords are slowed down: after 10 failed attempts, sign-in pauses for 15 minutes.
- Passwords are stored only as slow one-way hashes (bcrypt), never in readable form.
- Sessions are kept in secure cookies that page scripts can’t read. Google or Microsoft sign-in works only for people you have invited.
The right access for each person
- Roles for owners, HR, managers and employees, or your own role built from a checklist.
- Managers see their team; employees see only their own payslips and records.
- Payroll can need a second person’s approval before it is final.
Every change recorded
- An audit log records who changed what and when, salaries, bank details, approvals, settings.
- Employee verification checks (PAN, bank, Aadhaar, UAN) run only with the employee’s consent.
Data in transit
- Every page and file travels over encrypted HTTPS connections, and browsers are told to use HTTPS only.
Your data stays yours
- Download all your company’s data in one Excel file at any time (Settings → Company).
- If you close your account, your data is deleted 30 days later, time to change your mind or keep a copy.
- An unpaid invoice makes the account read-only for a while; nothing is deleted.
Your part
- Make two-step sign-in compulsory, at least for everyone who handles payroll (Settings → Users & roles).
- Give each person only the access they need, and remove logins when people leave.
- Keep downloaded payroll files (bank files, registers) somewhere safe, once downloaded, they are outside WeHR.