Built for workforce information that matters.
Workforce information is among the most sensitive data an organisation holds. Here is how access to it is controlled — stated plainly.
This page describes the access and control model in PiPO HRIS. It deliberately does not claim external certifications or accreditations. Where a control depends on how your environment is deployed and configured, this page says so, because a security claim that turns out to be conditional is worse than no claim at all. Specific arrangements for your organisation — including hosting, backup and retention — are documented during implementation.
The controls in the platform
Role-based access
What a person can do is defined by their role, configured to your structure rather than chosen from a fixed list.
- Roles configured per implementation
- Separation between HR, payroll and management views
Scope
What a person can see is defined by the part of the organisation they are responsible for.
- By entity, site, unit or team
- A supervisor sees their own workforce
Change logging
Changes to records are logged with who made them and when, across modules.
- Attributed and timestamped
- Available for review
Approval controls
Actions with financial or compliance consequence pass through an approval chain rather than a single user.
- Payroll run approval and locking
- Attendance and leave approval
- Change approval on pay elements
What we are not claiming
A security page that overstates is a liability for both sides. These are the limits of what we assert publicly.
PiPO HRIS does not currently publish an ISO 27001, SOC 2 or equivalent external certification, and this site will not imply one. If your procurement process requires evidence of specific controls, ask us during evaluation and we will answer each question directly — including where the answer is that a control is implemented but not independently certified.
Hosting arrangements, backup frequency, retention periods and data location are confirmed and documented for your implementation rather than asserted generically here, because they genuinely differ between deployments and a generic answer would be misleading.
We would rather lose a deal on an honest answer than win one on an implied standard.
For procurement and IT teams. A structured security questionnaire is answered as part of evaluation, covering access control, hosting, backup, retention, incident handling and data processing terms. Contact us and we will complete yours rather than sending a brochure.
Common questions
We do not claim an external certification on this site. If your evaluation requires evidence of specific controls, we answer each question directly during procurement.
Hosting arrangements are confirmed and documented for your implementation. We do not publish a single generic answer because it would not be accurate for every deployment.
No — not unless you configure it that way. Scope restricts what a role can see to the part of the organisation they are responsible for.
Changes to records are logged with who made them and when, across modules, and are available for review.
Send us your security questionnaire.
We will complete it properly, and tell you where a control is implemented but not externally certified.