Skip to content

Payroll and people data, seen only by the right people

BusinessHRM holds salaries, attendance, client records and invoices, so access control is the core of the product rather than a setting you find later. Here is exactly how it works.

See the controls Send a security questionnaire
  • Encrypted in transit
  • Over 560 permissions
  • Two-factor sign-in
  • Consent-first tracking

How BusinessHRM protects your data

Four layers work together: who can reach a record, how they sign in, how the data itself is stored and moved, and how the time tracker treats the people it measures.

  1. 01AccessRoles and field-level permissions decide who sees salaries, screenshots and client data.Details
  2. 02Sign-inTwo-factor authentication, Google sign-in, and SAML single sign-on on Enterprise.Details
  3. 03Your dataEncrypted in transit and at rest, backed up, exportable at any time and deletable on request.Details
  4. 04TrackingThe time tracker counts activity, never content, and people see what is recorded.Details

Permissions shaped to your org chart

Admin, Manager, Employee and Client roles are ready on day one. Build as many custom roles as you need from over 560 individual permissions.

  • Add, view, edit and delete are set separately for every area
  • Each one is scoped to all records, only what the user added, only what they own, or none
  • Managers see only their own team through reporting lines
  • Individual overrides on top of a role, for the exceptions
  • Clients get their own portal and see only their own projects, invoices and tickets
Team leadExample custom role
AreaViewAddEditDelete
Employee salariesOwnedNoneNoneNone
Leave requestsAllAddedAllNone
Tracker screenshotsAllNoneNoneNone
Client invoicesNoneNoneNoneNone
An illustration of one custom role. Every cell is yours to set, for every module.

Sign-in that holds when a password does not

People, apps and AI tools all come in through the same front door, with the same permissions.

  • Two-factor authenticationUsers can add a second step at sign-in, so a leaked password is not enough on its own.
  • Google and social sign-inLet people use the work account they already have instead of another password.
  • SAML single sign-onConnect your identity provider on Enterprise, and switch people off in one place.
  • Scoped API keysEach company issues its own API keys with scoped access. The MCP server uses the same keys and permissions.

Connecting Claude or another AI tool? The MCP server acts with the key owner's permissions and nothing more. How the MCP server works.

Your data stays yours

You own what you put in. We store it carefully, and you can take all of it out whenever you want.

The legal detail is in our privacy policy and data processing agreement.

  • Encrypted in transit and at rest

    Traffic to the app and the API runs over TLS. Stored data is encrypted at rest, and secrets never reach the browser.

  • Backups and storage you choose

    Database backups are built in, and files can live on Amazon S3 or Cloudflare R2 storage.

  • Change history

    Sensitive actions are logged, so you can see who changed what and when.

  • Export whenever you like

    CSV and PDF export on every report, and the full REST API for everything else. Your data leaves with you.

  • GDPR tooling

    Consent records and data export requests are handled inside the product, not by email.

  • Credentials vault

    Share project logins with the people who need them, without pasting passwords into chat.

Monitoring that respects the people it measures

The quickest way to lose a good team is to watch them in secret. Team Tracker, our Windows app, is built the other way round.

  • Tracking starts only when a person presses start
  • Clicks and key presses are counted, never what is typed
  • Screenshots are off unless the company turns them on
  • Each person can see every screenshot taken of them
  • Idle time can be kept or discarded by the employee
What Team Tracker records Time tracking features
Team Tracker settings for account, workspace switching, updates, theme and screenshot capture interval

Need your own server?

Enterprise runs on a dedicated private server, white-labelled on your own domain, with SAML single sign-on and custom integrations.

Compare plans

Found a security problem?

Tell us privately at [email protected] with the steps to reproduce it. Please do not test against other customers' data.

Security questions

How does BusinessHRM protect my data?

In layers. Access is controlled by roles and more than 560 individual permissions, each scoped to all records, only records the user added, only records they own, or none. Sign-in supports two-factor authentication, Google sign-in and, on Enterprise, SAML single sign-on. Data is encrypted in transit and at rest, backed up, and exportable at any time.

Who can see employee salaries and screenshots?

Only the roles you allow. Salaries, screenshots, reports and client records are each separate permissions, set independently for view, add, edit and delete. Managers can be limited to the people who report to them, and individual users can be given overrides on top of their role.

Do you support single sign-on?

Yes. SAML single sign-on is available on the Enterprise plan. On every plan, users can turn on two-factor authentication and sign in with Google.

Where is my data hosted?

Each company works in its own workspace, and its records are scoped to that company. Enterprise customers can run BusinessHRM on a dedicated private server. If you need a specific hosting region, contact us before you sign up.

Is the employee time tracker legal and ethical to use?

Team Tracker is built for transparent, consent-based tracking: it only runs after a person starts it, counts activity rather than recording keystrokes, and shows people every screenshot taken. Employers remain responsible for giving the notices and getting any consent their local law requires, as our acceptable use policy explains.

Can I export or delete our data?

Yes. Every report exports to CSV or PDF, and the REST API gives access to everything else. You can delete records at any time, and data export requests from individuals can be handled in the product.

Can you complete our security questionnaire?

Yes. Email [email protected] with your questionnaire or the controls you need to check, and we will answer them directly. A signed data processing agreement is available on request.

Give every person exactly the access they need

Start free, set up your roles, and invite the team when the permissions look right.

Start free Talk to us about security

Free forever for unlimited users. No credit card required.