Built for HR and payroll data from day one
Recruitment, HR, and payroll data is sensitive by nature. Here's what actually protects it in HIRD One — not a generic trust page, the real controls.
Branch & country isolation
Every candidate, job, and employee record belongs to a location. A Branch Manager sees their own branch; a Country Manager sees their own country — never the whole org by default. This is enforced at the data-access layer on every read and write, not just hidden in the UI.
IP allowlisting
Organizations can restrict sign-in to specific IPv4 ranges (CIDR blocks). Turn it on once your team's office/VPN IPs are known, and logins from anywhere else are rejected before they reach a password check.
Encrypted credentials at rest
Third-party credentials your org connects — email SMTP/IMAP passwords, WhatsApp/SMS API tokens, chat integration secrets — are stored AES-256-GCM encrypted, never in plain text.
Real audit logging
Access control changes, login attempts, payroll actions, candidate data changes, and platform-level actions are written to an append-only audit log, filterable by category — not a marketing promise, an actual queryable record.
Session controls
Sessions expire after 12 hours of inactivity with a rolling refresh on real activity. Suspending a user or changing their role force-revokes any session they already have open — they're bounced immediately, not at next login.
Your data stays yours
Export your candidates, employees, and payroll records at any time from within the product. We delete organization data on request after account closure.
Data residency & hosting
HIRD One's production infrastructure and database run on servers we control directly — not shared with any other product. Backups are taken on a regular schedule so a hardware failure doesn't mean data loss.
Questions about compliance or a security review?
Talk to us before you sign — we'd rather answer a hard question during evaluation than after you've moved your data in. Reach out via the Contact page.