01
Infrastructure
AIHR BD runs on managed cloud infrastructure with automatic patching, DDoS protection, and 99.9% uptime SLA. Our database is geo-redundant within the region.
01/06
Encryption everywhere
All data in transit uses TLS 1.2+. At rest, the database, file storage, and backups are AES-256 encrypted.
02/06
Strict tenant isolation
Every company runs in an isolated workspace enforced at the database layer with row-level security policies.
03/06
Granular access
Role-based access for Super Admin, Admin, HR, and Employee. Permissions can be overridden per user.
04/06
Full audit trail
Every sensitive action — payroll changes, role grants, deletions — is logged with user, time, and context.
05/06
Daily backups
Automated point-in-time backups with 30-day retention. Disaster-recovery tested every quarter.
06/06
Incident response
Critical issues are escalated within 1 hour. Customers are notified with root cause and fix within 24 hours.
02
Authentication
Passwords are hashed with industry-standard algorithms. Sessions are short-lived and revocable. Optional 2FA is available for Super Admin and Admin roles.
03
Compliance
We follow ISO 27001 aligned practices and Bangladesh data-residency expectations. Customers retain full ownership of their data and can export everything at any time.
Reporting a vulnerability
Found a security issue? Please disclose responsibly to . We acknowledge within 24 hours and credit researchers in our advisory once the fix is shipped.
Read our vulnerability disclosure policy or see the researchers listed in our Security Hall of Fame.