Security
Employee data deserves the same care as payroll.
Identity documents, face data and salaries are some of the most sensitive data a company holds. Here's exactly how we protect them.
Data protection
Data residency in India
Production databases, backups and file storage run in Indian regions. Data doesn't leave the country for processing.
Encryption everywhere
TLS 1.2+ in transit with HSTS. AES-256 at rest for databases, backups and uploaded documents.
Strong authentication
Passwords hashed with bcrypt, signed http-only session cookies, rate-limited sign-in and SSO on Enterprise.
Minimal biometric data
Face matching uses numeric descriptors. Enrolment photos are access-controlled and can be deleted on request.
Least-privilege roles
Every API and server action checks the caller's role. Employees can only ever read their own records.
Append-only audit log
Every admin change is written in the same transaction as the change itself, with who, what, when and from where.
Roles
Four roles. Nobody sees more than they need.
Permissions are enforced on the server for every request, not just hidden in the interface.
| Action | Super admin | Admin | Manager | Employee |
|---|---|---|---|---|
| Manage company settings and roles | Allowed | Not allowed | Not allowed | Not allowed |
| Add employees and verify KYC | Allowed | Allowed | Not allowed | Not allowed |
| Generate and approve payroll | Allowed | Allowed | Not allowed | Not allowed |
| Approve leave and attendance overrides | Allowed | Allowed | Allowed | Not allowed |
| View team attendance | Allowed | Allowed | Allowed | Not allowed |
| Mark own attendance, apply for leave | Allowed | Allowed | Allowed | Allowed |
| View own payslips | Allowed | Allowed | Allowed | Allowed |
Audit
Every change has a name and a reason.
Approvals, overrides, role changes and payroll edits are logged with the actor, before and after values, IP address and time. Logs can't be edited, even by a super admin.
Compliance
Built for the Digital Personal Data Protection Act, 2023.
You are the Data Fiduciary for your employees' data; we are your Data Processor. Kaam HR gives you the controls the Act expects.
- Notice and consent
- Employees see a plain-language notice before face enrolment and KYC upload, and their consent is recorded with a timestamp.
- Purpose limitation
- Biometric and identity data is used only for attendance verification and statutory onboarding, never for profiling or marketing.
- Data principal rights
- Employees can request access, correction and erasure from their profile. Admins get a queue with statutory timelines.
- Retention
- Configurable retention per data category. Records are deleted or anonymised once the purpose and legal retention period end.
- Breach response
- A documented incident process, including notification to the Data Protection Board and affected employees as the Act requires.
- Processor obligations
- As a Data Processor we act only on your instructions, under a Data Processing Agreement available to every customer.
This page describes our controls and is not legal advice. Read our privacy policy or contact us for our DPA, sub-processor list or a security questionnaire.
See your next payroll run before you commit.
A 30-minute walkthrough with your own org structure, then a 14-day pilot with your team.