Security
Your payroll data, locked down.
Security practices built into pagar karo from day one, assessed against OWASP ASVS Level 2.
Encryption
HTTPS everywhere. Aadhaar, PAN and bank account numbers are encrypted at rest and masked on screen.
Access control
Roles with fine-grained privileges and data scopes — self, team, department, location or organisation.
Audit trail
Changes to staff, attendance, salary and payroll are logged with who, what and when. Unlocks need a reason.
Secure sign-in
Mobile number + SMS code, short-lived app tokens with rotation, remote sign-out of lost phones.
Backups
Nightly backups with regular restore tests on a dedicated server.
Privacy controls
Privacy notice accepted by staff, data requests handled in-app, retention schedules and full export.
Location only on duty
Field tracking runs only while punched in; positions are purged on a retention schedule.
Face data
Kiosk face matching uses encrypted measurements, needs consent, and is deleted when someone leaves.
Hardening
Security headers, CSRF protection, rate limits, signed download links and a security event log.
Found a vulnerability? Email contact@pagarkaro.com with details. Please give us reasonable time to fix it before disclosing publicly. See also security.txt.