Security

HR data deserves more than a login screen

Salary, visa and performance data sit at the top of any company's sensitivity list. Namya HR is built so permissions hold at the data layer, not just the interface.

Passwordless sign-in

Access is granted through a 6-digit one-time code sent to a verified company email domain. Codes expire quickly and no passwords are stored, so none can be leaked or reused.

Six permission roles

Employee, line manager, department head, recruiter, HR admin and executive. Each role sees only the records and fields its job requires.

Enforced at the database

Row-level security policies live in PostgreSQL, so permissions apply to every query — even if the interface is bypassed entirely.

Encryption in transit and at rest

TLS everywhere with auto-renewed certificates, and encrypted storage for records and uploaded documents.

Audit logging

Sensitive actions are recorded, and every salary change keeps a full before-and-after trail with requester, approver, reason and effective date.

Backups and rollback

Daily database backups with point-in-time recovery, and one-click rollback of any application release.

Personal data held

CategoryFieldsSensitivity
IdentityName, work email, nationality, date of birthStandard
EmploymentJob title, department, manager, start date, contract typeStandard
DocumentsPassport, visa, Emirates ID, contractsSensitive
CompensationBasic salary, allowances, change historyHighly sensitive
PerformanceObjectives, progress updates, review notesSensitive

Documents — passports, visas, Emirates IDs and contracts — are stored on your own storage repository, such as Google Workspace, so they never leave the systems your organisation already controls. All other data is held on a secure, encrypted database with row-level access policies.

Data is held for the duration of employment and any statutory retention period that follows. Access is logged, and compensation data is restricted to HR admin and executive roles.