Security
Employee records are sensitive. This page says plainly how HRMS protects them and what stays your responsibility.
What HRMS does
- Sign-in is required. People sign in through a trusted provider, so HRMS never sees or stores their password.
- The database enforces access rules. Row-level security in the database decides who can read or change each record, not just the screens in the app.
- Employee documents are private. Uploaded files sit in private storage and are opened through short-lived links.
- Connections are encrypted. The site is served over HTTPS.
Where your data lives
On the hosted plan your data is stored with our infrastructure provider, Supabase. On the on-premise plan it stays on the server you provide, and we only see it if you give us access for support.
What stays with you
- Deciding who in your team can sign in.
- Keeping sign-in accounts and, for on-premise, your server secure.
- Making sure you have the right to store your employees’ details.
Report a security problem
If you think you have found a weakness, email info@thitainfo.com with what you saw. Please do not publish it before we have had a chance to fix it.