Security & trust

Your people data, protected

PeopleNova handles attendance records, payroll details, and personal documents for your whole team. Here's specifically how that data is protected — not marketing language, the actual mechanisms.

Illustration of a shield with a padlock, representing PeopleNova's data protection

Isolated per organization

Every organization on PeopleNova is isolated at the database level using PostgreSQL Row-Level Security — your organization's records are enforced to stay within your organization by the database itself, not just filtered in the app layer.

Encrypted in transit

All traffic between the PeopleNova apps and our servers runs over HTTPS/TLS, whether you're checking in from the mobile app or generating a payslip from the admin dashboard.

Role-based access, by design

Employees, managers, HR admins, and platform super admins each see only what their role needs. An employee can't see a colleague's payslip; a manager can't reach into company-wide settings. Access follows role, not convenience.

Sensitive data, used only for its purpose

Biometric and selfie attendance verification exist to confirm who checked in — nothing else. Statutory details like PAN, UAN, and bank account numbers are collected specifically to generate compliant payroll and are used for that purpose.

Hosted in India

PeopleNova's infrastructure runs in AWS's Mumbai (ap-south-1) region — your organization's data stays within India, which matters for data-residency-conscious buyers in regulated sectors.

Built on audited infrastructure

PeopleNova is built on Supabase, a managed PostgreSQL platform — your data sits on a widely used, actively maintained database engine rather than a bespoke, unaudited one.

On data policy: the mechanisms above are technical facts about how PeopleNova is built. Formal commitments — data retention periods, third-party sharing policy, DPDP Act / GDPR-specific documentation — belong in a reviewed Privacy Policy and Data Processing Agreement, not summarized here. Ask us directly if your organization needs either before signing on.

Have a specific security or compliance question?