Security
Your payroll data is sensitive.
We treat it that way.
Salary data, national ID numbers, KRA PINs — this is some of the most sensitive data a business holds. Here is how we protect it.
Encrypted in transit
Every connection to AndikishaHR uses TLS. Passwords are stored only as salted hashes, and the credentials you save for integrations are encrypted before they are written to the database.
Hosted in the European Union
The platform runs on servers in the European Union, operated by our hosting provider, Contabo. Your data is stored and processed there, not in Kenya. Email is delivered through Resend.
Each company's data kept separate
Every record belongs to one company, and every request is tied to the signed-in user's company before any data is read. One account cannot read another account's data.
Key changes are logged
Key changes to payroll, employee and account records are logged with the user who made them and the time. We are still extending this log to cover every administrative action.
Role-based access control
Platform access is governed by roles with the principle of least privilege. HR Managers, Payroll Officers, Line Managers, and Employees each see only what their role permits.
Security reviews
We review the platform's code and infrastructure for security problems and fix findings in order of severity. We have not yet had an external penetration test, and we will say so here when we have.
Where we stand today