Security
Salaries, personal details and documents are some of the most sensitive data a company holds. Here is how Vettri keeps them in the right hands.
Every action requires a specific permission. Each permission can be granted for the whole organisation, a department, a team, or only the employee's own records, so a manager sees their team and an employee sees only themself.
Start from built-in roles such as HR Admin, Manager, Employee and IT Administrator, create your own, and give individual users extra permissions that can expire automatically.
Each organisation's records are separated, and every request is checked against the signed-in user's company. Isolation between companies is covered by automated tests.
Sensitive changes are recorded with who made them and when, so administrators can review activity in the audit log.
Passwords are stored as one-way BCrypt hashes, never in plain text. New accounts are activated through an emailed invitation, and users can reset forgotten passwords by email.
Signed-in sessions use access tokens that expire after minutes, renewed with rotating refresh tokens, which limits the impact of a leaked token.
Browser check-ins can be verified against your office locations and an allowed radius, and biometric punches come straight from your registered devices.
The Ask Vettri assistant uses a fixed set of tools that apply the same permission checks as the rest of the product, so it can only see what the person asking can see.
Send it to us and we'll answer it, or ask anything about how Vettri handles your data.