NeevHR Security & Compliance
Employee and payroll data is among the most sensitive a company holds. This page describes the controls NeevHR operates today, stated plainly.
Sample person and sample numbers.
Sign-in and single sign-on
Sign in with Google
People sign in with your company's Google account. Your company turns it on for its own domain, and it works for people who already have a NeevHR login.
Sign in with Microsoft
Built, and being switched on. Your Microsoft admin gives consent once for your company.
Require single sign-on
A company can make single sign-on the way in for its people, with a Company Admin password kept as the way back.
MFA
Authenticator-app (TOTP) codes with recovery codes. Each company can make MFA mandatory for every user.
SAML
SAML and Okta are not built. If your identity provider needs SAML, tell us during security review.
Application security
Authentication
Email and password sign-in with account lockout after repeated failed attempts.
Password policy
At least 12 characters with mixed character types, the last five passwords blocked, and 90-day expiry.
Session management
Per-company idle and absolute session timeouts, a limit on concurrent sessions, and session revocation.
Authorization and RBAC
Permissions are granted through roles, with time-bound grants and separation-of-duties checks on conflicting roles.
Data scopes
Each role sees only the entities, departments or teams in its scope, per module.
Login IP allowlist
Optionally restrict sign-in to your office or VPN IP ranges.
Data security
Tenant isolation
Every company's data is separated by Postgres row-level security enforced in the database. The application connects with a role that cannot bypass it.
Encryption in transit
All traffic to the application is served over HTTPS.
Encryption at rest
PAN, Aadhaar, UAN, ESI number, bank account and IFSC are encrypted at the field level with AES-256-GCM, with key rotation.
Field-level protection
Sensitive fields can be shown in full, masked or hidden per role, module and data class.
Backup and recovery
Database backups and a documented restore procedure are in place. Recovery objectives are discussed during security review.
Privacy and the DPDP Act 2023
Consent
Consent is recorded per purpose, with a consent register.
Data principal rights
Requests for access, correction, erasure, grievance and nomination are logged and tracked to closure, including from employee self-service.
Data retention
Retention schedules define how long each kind of record is kept before purge.
Data deletion
Records past retention are purged by policy, and erasure requests follow a governed process.
Legal hold
Legal hold suspends deletion for records under dispute or investigation.
Audit
Audit logs
Create, update and delete actions are recorded with who, what and when.
Administrative activity
Settings, policy and configuration changes are logged.
Payroll changes
Payroll runs record compute, verify, approve and publish steps, with separation of duties.
Permission changes
Role assignments, grants and revocations are recorded.
Effective-dated history
Employee changes are kept as dated history rather than overwritten.
Sensitive data views
A log of who viewed salary, PAN, Aadhaar and bank details.
Tamper-evident audit trail
Each entry is sealed with the one before it, so an entry changed or removed in the database shows up when the trail is verified.
Access reviews
Periodic reviews where owners confirm or remove what each person can reach.
Second-admin approval
An optional setting so role and workflow changes need a second admin.
Vendor support access
NeevHR support signs in only while your Company Admin allows it. Access is time-boxed and read-only unless you allow changes.
Infrastructure
- Hosted in India, on servers in Mumbai.
- AI, only if your company switches it on: what each feature needs goes to Anthropic, which may process it outside India. The assistant's tools do not read bank, PAN, Aadhaar, UAN, ESI number, address, health or disciplinary data. On-screen AI can send cleaned resume text and uploaded receipts or proofs as whole files, and a file can contain what is printed on it. Proofs on the 80D, 80DD, 80DDB and 80U lines are not sent. See the AI page for each feature.
- PostgreSQL database with row-level security on tenant tables.
- Further architecture detail is shared with your IT team during security review.
Certifications
NeevHR does not currently hold SOC 2, ISO/IEC 27001 or other third-party security certifications. We will say so here when that changes. In the meantime, we walk your IT and information security team through the controls above in as much depth as your due diligence requires, and answer security questionnaires.
Sign in with Google is available and Sign in with Microsoft is being switched on. SAML and Okta are not built.
Related: Privacy policy · Integrations · Security FAQ
Security questions
How is employee data isolated?
Each company's data is separated by Postgres row-level security enforced in the database, and the application connects with a role that cannot bypass it.
Is data encrypted?
Data is encrypted in transit. Sensitive identifiers such as PAN, Aadhaar, UAN, ESI number and bank account details are encrypted at the field level with AES-256-GCM.
Does NeevHR support RBAC and audit logs?
Yes. Role-based access with data scopes and field-level masking controls who sees what, and administrative, payroll and permission changes are recorded in an audit log.
Does NeevHR support MFA?
Yes. Users can enable authenticator-app (TOTP) MFA with recovery codes, and administrators can make MFA mandatory for everyone in the company.
Does NeevHR support single sign-on?
Yes, Sign in with Google, and Sign in with Microsoft is being switched on. Each company turns it on for its own domain, and it works for people who already have a NeevHR login. SAML is not available.
Where is data hosted?
In India. NeevHR runs on servers in Mumbai.
Does NeevHR hold SOC 2 or ISO 27001 certification?
No. NeevHR does not currently hold SOC 2 or ISO 27001 certification. We walk your IT and security team through the controls in place during evaluation.