Security & Trust

Trust matters

Protecting people starts with protecting information.

HR and payroll involve sensitive data. Review the controls and assurance appropriate to your HRplus deployment.

BSI marks of trust

Recognised standards. A clear commitment to your information.

Our BSI certifications cover information security management, cloud security and personal data in the cloud. Explore each standard in plain language.

Established HRplus controls.

The current HRplus security information describes these areas.

Access controls

Two-factor authentication, password policies, account lockout, and configured user access.

Data protection

Encryption in transit and at rest, along with controlled production access.

Operational resilience

Backups, monitoring, and separation of development and production environments.

Ask for the assurance you need.

Certification and scope

The HRplus company website lists ISO 27001, ISO 27017, and ISO 27018 certifications from BSI. Request current certificates and the scope relevant to your service.

HRplus V6 deployment review

Confirm hosting, data location, access, retention, recovery arrangements, and AI controls for the specific Version 6 environment in your agreement.

Clear controls. Accountable access.

Version 6 combines user administration, approval responsibilities and recorded activity with configurable access.

Users, roles and actions

Manage invitations, accounts and assigned roles. Configure Create, View, Edit and Delete permissions for supported modules, pages, tabs and registered actions.

Organisation and sensitive information

Apply organisational restrictions and applicable schedule or pay-group access. Configure supported personal-field access and individual overrides, then review effective access through available matrices.

Sign-in and session policies

Configure passwords, idle timeout, authenticator-based MFA and email two-step verification. Set up supported single sign-on connections subject to provider configuration and validation.

Approvals and delegation

Maintain approval workflows, approver groups and requests. Assign workflow and email delegations through administrative user settings.

Audit and administration

Review recorded activity through the Audit Log, access matrices and standard Audit Logs report. Maintain branding, SMTP, templates, translations, storage and employee ID settings.

AI knowledge and oversight

Manage company reference documents, available AI tools and administrative settings. Review usage, token consumption and estimated costs, with a monthly spending limit for the implemented budget check.

Let’s answer your security questions.

Tell us about your people, your processes, and where you want to go.