HR data security and personal data protection

Yes. Each company has its own workspace, at its own address, and isolation is closed by default: a request that does not know which workspace it is working in fails instead of returning everything. This separation is checked by automated tests on every software change.

Permissions define what a user can do (approve leave, manage time clocks, close payroll); the data scope defines for whom: their team, their sites or the whole company.

No one can change their own roles or widen their own scope.

Net salary, net hourly rate and bank details (RIB) are encrypted in the database and masked on screen. Only authorized people can reveal them, each reveal is logged, and they never appear in a default export.

The activity log records who created, changed or deleted an employee, a punch, a leave request or a role, with the old and new value of each field. Sign-ins and reveals of sensitive data are recorded too.

In Morocco, law n° 09-08 protects personal data, under the supervision of the CNDP; the employer, as data controller, completes the required formalities.

TEMPO limits biometric data:

• fingerprints are captured on the time clock, and any stored template is encrypted;
• a badge or PIN code replaces biometrics on most time clocks;
• the selfie when clocking in by phone can be turned off per site.

For details, read the guide biometric time clocks and the CNDP.