Security & compliance
Your people data, protected by design
Salaries, tax numbers and ID cards are the most sensitive data a company holds. KerjaQu is built so it stays in the right hands.
Tenant isolation
Every query runs under PostgreSQL row-level security. One company can never read another company’s data, even through a bug.
Encryption
TLS everywhere in transit. Sensitive fields such as NIK, NPWP and bank accounts are encrypted at rest.
Strong sign-in
Two-factor authentication with authenticator apps and backup codes, and an option to require it for everyone.
Least privilege
Roles with fine-grained permissions and data scope, so a branch HR only sees their branch and payroll stays private.
Audit log
Every create, update and delete is recorded with who, when and what changed, and can be exported.
Data in Indonesia
Application data and files are stored in data centers located in Indonesia, with encrypted daily backups.
Aligned with UU PDP
Law 27/2022 on Personal Data Protection gives employees rights over their data. KerjaQu helps you meet your obligations as controller.
- Employees can see and correct their own profile
- Access to sensitive fields is permission-based and logged
- Exports for data access requests
- Separation of duties for payroll approval
How we work
- Security headers and rate limits on every endpoint
- Dependencies scanned in CI on every change
- Signed, single-use links for approvals and resets
- Webhooks signed with HMAC-SHA256
- Session cookies are HttpOnly and Secure
- Error monitoring without personal data
Ready to make HR simple?
Start your 14-day free trial today, or let us walk you through KerjaQu.