Security you can audit, not just trust
Per-organisation isolation, role-based access, and a forensic audit trail — built into the platform, not bolted on. Here's exactly what protects your data.
What protects your data today
Every item below is live in the product — not on a roadmap.
Tenant isolation
Every organisation runs in its own isolated tenant. Your data is never co-mingled with anyone else's, at the database layer.
Role-based access
Every module checks a role's exact permissions before showing data — employees, managers, and HR each see only what their role allows.
Full audit trail
Every change is logged with the actor, their IP address, and the exact field that changed, before and after. Nothing changes without a name on it.
SSO with Google or Microsoft
Sign in with the identity provider you already run. No new passwords for your team to manage or for us to store.
Account lockout
Accounts lock after repeated failed sign-in attempts and auto-unlock after a cooldown — protection against brute-force attempts.
Password history
The last 5 passwords are blocked from reuse whenever a password is changed.
Field-level encryption
Sensitive fields are encrypted at the field level, not just protected in transit.
Signed, time-limited file access
Every uploaded document is served through a signed link that expires in 15 minutes — nothing stays permanently exposed.
Where Witcrew ends and payroll begins
Witcrew keeps the audit-ready people record — profiles, leave, attendance, assets and approvals. It does not process payroll, hold bank details, or touch statutory filings.
That's a deliberate boundary, not a missing feature. No payroll processing means no new financial-data risk on top of your existing payroll provider — Witcrew hands that system clean, exportable data and stops there.
What we haven't done yet
In the interest of the same audit trail we sell you, here's what's still open.
Formal certification
We haven't pursued a SOC 2 or ISO 27001 certification yet. Ask us for our current security posture and roadmap on a call.
Data residency & retention
Hosting region, retention windows, and deletion-on-exit vary by plan. Talk to us about the specifics for your deployment.
Give HR a cleaner month-end
Keep employee records, leave, attendance, assets, approvals, and reports in order before payroll starts. Less chasing for HR. Cleaner inputs for payroll. Clearer visibility for the company.
Book a 20-minute demo