How we protect your company's data.
MadyHR.ai holds what HR needs, including completed W-4s and Form I-9s, so here is how we look after it. No location tracking and no face or fingerprint scans: we never collect biometrics, and a clock-in records only the time.
Stored in the USA
US customer data is kept in the United States, separately from our UK service.
Where your data is storedEncrypted connections
Every page, sign-in and download is served over HTTPS.
Passwords kept safely
Passwords are never stored as typed: only a bcrypt hash is kept. They must be at least 12 characters.
Your company's data kept apart
The database itself keeps each company's records separate, so one company can't read another's.
The right access for each role
Admins, HR, managers and employees each see only what their role needs. Employees see only their own records, and managers never see pay.
A record of changes
Important changes are written to an audit log that can't be edited afterwards.
Sign-in limits
Sign-in attempts are limited, per address and per email, to stop password guessing.
Files behind links that expire
Uploaded documents, including completed W-4s and Form I-9s, download only through links that expire after a few minutes.
Card payments by Stripe
Payments go through Stripe. We never see your full card number.
More detail
The US Privacy Policy lists every service provider that helps us run MadyHR.ai, and what each one does.