Security
What IT and procurement will ask
Last updated October 2026. Security contact: [email protected].
ISO/IEC 27001 certified. Certificate details on request.
Your data, kept apart
Each company has its own isolated workspace. Encrypted in transit (TLS) and at rest (AES-256), stored in Canada by default, EU or Australian residency on request. Daily backups with point-in-time recovery, and continuous uptime monitoring.
Who can do what
Roles per user. Google and Microsoft sign-in on Enterprise. The person who submits a PLOD can't approve it.
A record that holds
Approved shifts are locked. Reopening needs an admin and a written reason, and is recorded. Submitter and approver print on every PLOD.
Paperwork
Data processing agreement, privacy policy, and vulnerability disclosure: report an issue to [email protected] and we acknowledge it within two business days.
How AI features handle your data
Off unless you switch it on; each company's data is processed separately; no AI step can approve a shift or change a number.