Security & compliance
Your HR data deserves the highest level of protection
Salaries, ID documents, medical records: we handle your data with the practices of the best SaaS companies.
Per-company isolation
Every request is limited to your company’s data and checked on the server on every call. No data is shared between customers.
Encryption
Traffic encrypted with TLS and HSTS. Sensitive secrets (two-step verification keys, webhook secrets) encrypted with AES-256-GCM in the database.
Two-step verification and SSO
Authenticator app with recovery codes, enforceable for HR; single sign-on with Google Workspace and Microsoft Entra ID.
Controlled sessions
Short-lived tokens, visible and revocable devices, sign out of every device in one click.
Audit log
Sign-ins, approvals, exports, settings changes: everything is recorded and available to administrators.
Hosting and backups
Infrastructure in a certified data center with daily encrypted backups. Dedicated hosting in Tunisia or the European Union with Enterprise.
Access control
Employee, manager, HR and admin roles; amounts and anonymous reports are only visible to authorized people.
Portability and erasure
Export an employee’s personal data, anonymize former employees, export all your data at any time.
Compliance
Built for Tunisian law and the GDPR
Salario helps you comply with Tunisia’s Organic Law No. 2004-63 of 27 July 2004 on personal data protection (INPDP) and, for your business with Europe, the GDPR.
- Data processing agreement available
- Data minimization and documented purposes
- Tools for access, rectification and erasure requests
- Employees can report concerns anonymously
- Configurable retention periods
- Log of accesses and exports
Questions from your IT team
Where is the data hosted?
In a certified data center. The Enterprise plan lets you choose dedicated hosting in Tunisia or the European Union.
Can we require Google or Microsoft sign-in?
Yes. Once your domains are verified through DNS you can require single sign-on; administrators keep a break-glass access.
Do you have an API?
Yes: a REST API documented with OpenAPI 3.1, scoped keys and HMAC-SHA256 signed webhooks.
What happens if we leave?
You export your data in open formats, then we delete it within the periods set in the contract.
A security question or a questionnaire to fill in? Write to us: sales@e-tafakna.com
Ready to make HR simple?
14-day free trial, no credit card required. Your data stays yours.