Privacy & Policy

ConnectHR stores each client’s data in an independent database, ensuring it is not mixed with other clients’ data. Additional files like documents or images are stored in separate folders with strict access restrictions. This approach guarantees clear segregation of customer data.

Sensitive data is encrypted both at rest and in transit. Data transmitted between client and server is secured using TLS (SSL/TLS with SHA256 certificates). At rest, data is encrypted within databases, with strong encryption algorithms such as AES-256 applied to maintain confidentiality

Access to systems and databases is strictly regulated using role-based access control (RBAC). Only authorized personnel are allowed access to the partitions and databases they need for their roles. Multi-factor authentication (MFA) and strong authentication policies are also in place for network administration and remote access.

Data backups are performed daily, with application data archived in a secure format (ZIP/SQL) and stored in multiple locations. Monthly integrity tests are conducted by restoring backups to ensure the reliability of the system. Backup logs are maintained, reviewed, and retained in accordance with organizational and regulatory requirements.

The organization complies with international standards such as GDPR and enforces policies for cryptographic controls, data segregation, and access management. Employees undergo regular security awareness training, including role-based education, phishing simulations, and social engineering awareness campaigns, to reduce risks from human error.