Compensation, tenure, demographics, exits. We treat it that way — audited controls, read-only connections, and access that stays locked down by default.
Every integration is a one-way API sync authorized by you. We never write back to your system of record, so nothing we do can alter or corrupt your source.
Workforce data is encrypted as it moves between your systems and ours, and stays encrypted once it lands in storage.
Access to connected data is gated by private key, not by shared credentials passed between systems or stored in a config file.
Leaders see their own people and nothing more. Compensation and PII are gated separately, so a manager viewing headcount doesn’t automatically see salaries.
Our security program is structured against the NIST Cybersecurity Framework, tracked continuously through Drata, and audited by Sensiba San Filippo.
Security is as much about what a vendor can't do as what they can.
If you're filling in a vendor assessment, start here.
Read-only API access, authorized by you. No write permissions, no admin credentials shared over email or Slack, and no IT ticket required to set it up. You can revoke access from your HRIS at any time.
Yes. Our SOC 2 audit is performed by Sensiba San Filippo, and our controls are continuously monitored through Drata rather than checked once a year.
Workforce data is encrypted both in transit and at rest, with access to connected data gated by private key control.
You decide. Access is scoped by role, so a department head sees their own people and nothing further. Compensation and PII are permissioned separately from headcount and turnover.
Yes. See our privacy policy for how personal data is collected, used, and retained.
Get in touch and we'll walk your security team through it. Contact us to request documentation.
Send us your questionnaire and we’ll turn it around — or get your security team on a call with ours. We’d rather answer properly than have you guess from a web page.
Read-only, revocable, and live in a day. The fastest way to evaluate how we handle your data is to watch us do it.
Employee Cycle’s team of HR data experts are certified, compliant and able to ensure a safe space for your HR data connectivity and storage.
