Platform
Security
What protects the company's records: a second lock on every account, encrypted private fields and documents, roles, an access log readable by the owner and editable by nobody, and support access only the owner grants.
Sign-in
- A one-time code or link, then a passkey or an authenticator code: mandatory for everyone who opens the suite, owners, managers, recruiters.
- Sessions: every open session is listed; "Sign out everywhere else" ends the others. Sign-in alerts email the owner when the suite is opened from a session it has not seen.
Data
- Personal numbers, IBANs, addresses and documents are encrypted with AES-256-GCM; the key lives on the server, never in a browser.
- Every look at a private field, every document opened, every export, every pay run approval and restore is in the access log.
- Snapshots before every risky write; restore in one click (Settings › Snapshots).
Doors
- The employee door and the accountant door open with a code to an email the company holds; they see only what the door allows.
- API keys carry scopes, are shown once, and every call is logged.
Support
findjobs staff never see a company's records unless the owner grants access for 24 hours on Settings › Security; every look is logged.