Security & privacy
Employee data deserves care.
Attendance, salaries and identity documents are some of the most sensitive data a business holds. Here is how Vetanly protects them.
Role-based access
Owners, admins, HR, branch managers and employees each see only what their role allows. HR does not see payroll; employees see only their own records.
Branch-level permissions
Branch managers are limited to the people in their branches, enforced on the server for every request.
Encrypted sensitive fields
Bank account numbers, PAN and provider API keys are encrypted at rest; only the last digits are ever shown.
Audit log
Every change, from salary edits to approvals and exports, is recorded with who made it and when, and is available to the owner.
Private documents
Receipts, proofs and documents are stored privately and opened through short-lived signed links.
Face data under control
Face templates are used only for attendance matching, kept to a bounded set per employee, and can be revoked by an admin at any time.
One session per account
Signing in elsewhere ends the previous session, and verification codes are rate-limited.
Kiosk device keys
Every kiosk authenticates with its own key that can be rotated or disabled instantly.
Your data is yours
Organizations can be paused or scheduled for deletion by their owner; on deletion, records and files are erased.
Your part
Good practice for your team
- • Ask employees for consent before enrolling their face for attendance, as India's Digital Personal Data Protection Act expects.
- • Give HR and branch managers the narrowest role that does the job.
- • Rotate a kiosk's key if a device is lost, and switch the kiosk off.
- • Review the audit log after payroll and settings changes.
Questions about security?
We are happy to walk your team through how Vetanly handles data.