Security
Demo: administration is view-only – saving is blocked on the server.
Default: nothing enforced – existing passwords stay valid, the rules apply to new passwords. Two-factor is optional until you require it for roles. You switch on HTTPS redirect, HSTS and encryption yourself. Status overview
Encryption of data at rest
off
Encrypted: Sensitive personnel data (additional layer), Emergency contacts, Staff notes, Salaries (additional layer), Contract notes, Absence notes. Always encrypted: access keys of the integrations, two-factor secrets, SMTP password, sensitive personnel data and salaries.
Key: created outside the web root when switched on
Failed attempts & locks
No failed attempts stored.
Two-factor sign-in per person
| Name | Role | Status | |
|---|---|---|---|
| Charlie Johnson | Admin | off | |
| Daniel Wright | Manager | off | |
| Jack MacDonald | Manager | off | |
| Oliver Roberts | Employee | off | |
| Thomas Wright | HR | off |
Demo – this is what your team sees: Sign-in page · Two-factor step · Forgotten password · Set up 2FA
Security log
No entries yet.