Security

§01Our approach

ShiftworkQ handles sensitive workforce data — salaries, documents, timesheets and personal records — so security is built into the platform rather than added on. Below is an overview of the controls that protect your data.

§02Access & permissions

Access is governed by a layered permission model.

§03Encryption

Traffic to and from the platform is encrypted in transit using TLS. Credentials are hashed, and sensitive configuration is protected at rest by the hosting environment.

§04Auditing & monitoring

A searchable activity log records actions across the platform, giving administrators a full audit trail. Scheduled housekeeping keeps logs and notifications tidy.

§05Data integrity & recovery

• Soft-delete with restore across masters, so records aren’t lost to a mistaken deletion.
• Regular backups of the production database.
• Tenant separation so Customers’ data stays isolated.

§06Responsible disclosure

If you believe you have found a vulnerability, please report it to security@shiftworkq.com. We appreciate responsible disclosure and will work with you to verify and address genuine issues.

§07Contact

For security questions or documentation requests, contact security@shiftworkq.com.