People
Employee records
One record per person: role, department, manager, start, pay, leave, documents, time off, reviews, and the history of every change. Private fields are encrypted and every look at them is logged.
What a record holds
- Name, email, phone, role, role family, department, manager, start date, pay (gross or net agreed, monthly or hourly), hours a week, pension, leave days, carried days.
- Private: personal number, IBAN, address. Encrypted at rest; shown on demand; the look is logged with who and when.
- Documents with expiry dates, time off, reviews, the pay run lines, the history of every change with who made it and from when.
Adding people
- One by one on People › Records, from a hire on the pipeline (Onboarding), or a whole spreadsheet at once (Settings › Import staff).
- Nothing is ever deleted: a leaver's record is kept with the last day and the reason; archive is the only removal.
Leaving
Set the last day on the record; the exit runs on People › Leaving: the checklist, the final settlement figure, the employment certificate.
API
GET /people, POST /people, GET and PATCH /people/{id}, POST /people/{id}/leaving. Private fields never travel; the API says whether they exist.