🛡️

Security at MyWorkara

Your HR data is some of the most sensitive data your business holds. Here's how we protect it — honestly, without overclaiming.

How we protect your data

🔒

Encryption in transit & at rest

All traffic is served over HTTPS/TLS, and data is encrypted at rest by our managed database provider.

🧱

Per-tenant isolation

Every company’s data is isolated at the database level with row-level security — one workspace can never read another’s records.

🔐

Role-based access control

Admin, HR, manager and employee roles each see and do only what their role permits, enforced in the database, not just the UI.

🗝️

Least privilege

Sensitive data like payroll is restricted to the roles that need it; employees see only their own records.

☁️

Managed cloud infrastructure

Built on managed, industry-standard cloud infrastructure (Postgres + a modern app platform) with security patching handled by our providers.

💾

Regular backups

Your data is backed up by our database provider so it can be recovered if something goes wrong.

🔑

Secure authentication

Sign-in is handled by a dedicated auth provider with hashed credentials and session management — we never store plain-text passwords.

🛡️

Secure by default

Security policies are applied automatically to new data, so protection is the default rather than an afterthought.

Compliance posture — the honest version

MyWorkara is an early-stage product built for compliance with India's Digital Personal Data Protection (DPDP) Act 2023. We are actively building toward formal certifications such as SOC 2 and ISO 27001, but we do nothold them yet — and we won't claim badges we haven't earned. If a certification matters for your procurement, talk to us about where we are on the roadmap.

Read our Data Protection commitment →

Found a vulnerability?

We appreciate responsible disclosure. Email us with details and we'll respond quickly.

security@myworkara.com