Encryption
TLS 1.2+ in transit and AES-256 at rest for platform data.
Trust
Security
Built for organizations that need enterprise-grade data protection and governance — including MFA and optional biometric punch confirmation.
Role-aware controls
RBAC, MFA, and module-level access boundaries
Audit-ready records
Immutable event trails for key actions
Device-bound biometrics
WebAuthn punch — no biometric templates stored
Security review path
Procurement and trust documentation
We support security questionnaires, architecture walkthroughs, and data-protection review calls during evaluation. Request materials through security@peovix.com.
Encryption at restSSO readyMFAAudit logsRBACOIDCTenant scoped
Controls
How we protect workforce data
Access control
Four portals, RBAC, optional MFA (TOTP), SSO (OIDC), and least-privilege admin roles.
Tenant isolation
Organization-scoped data access so customer records stay separated.
Auditability
Immutable audit logs for sensitive HR and admin actions.
Operational reviews
Continuous monitoring, dependency patching, and regular security reviews.
Incident response
Documented incident triage and customer communication workflow.
MFA & biometrics
Optional TOTP multi-factor authentication and WebAuthn biometric punch confirmation for time clocks.
Responsible disclosure
Report suspected issues through security@peovix.com for coordinated response.
Trust & Security
Workforce data protection is built into our architecture, access model, and daily operations.
Encryption
Data is encrypted in transit using TLS 1.2+ and encrypted at rest using AES-256.
Access control
Four role-based portals, least-privilege access controls, optional MFA (TOTP), and OIDC SSO reduce unnecessary data exposure.
Biometric punch
Optional WebAuthn confirmation (Face ID, fingerprint, or Windows Hello) for live time punch — device-bound credentials, not a biometric database we store.
Auditability
Security-sensitive and HR-sensitive actions are logged with immutable audit trails to support investigations and reviews.
Security operations
We run continuous monitoring, vulnerability management, and periodic access reviews for production systems.
Incident response
Our team follows a documented incident response process with severity triage, customer communication, and post-incident remediation.
Ready to run people ops in one place?
Start a 14-day trial or book a demo. Bring your regions and team size — we will map the right plan.
Prefer a quick walkthrough first? Explore the product in 3 minutes