Security

Aqency HR stores some of the most sensitive data your organization has: salaries, PTO, personal details. We treat security as a first-class feature, not an afterthought.

Encryption

• All traffic is encrypted in transit with TLS 1.2+.
• Data at rest is encrypted using AES-256.
• Secrets and credentials are stored in a dedicated, access-controlled vault.

Authentication & access control

• Passwords are hashed using modern key-derivation functions.
• Single sign-on (Google) is supported, with SAML SSO on enterprise plans.
• Row-level security policies enforce that workspaces can only access their own data.
• Role-based permissions limit what each member can see and do.

Infrastructure

Aqency HR runs on hardened cloud infrastructure with isolated environments for development, staging, and production. Backups run daily and are tested regularly.

Application security

• Dependencies are scanned continuously for known vulnerabilities.
• All code changes go through review before reaching production.
• We follow OWASP Top 10 best practices in design and review.

Privacy and data handling

We process customer data only to deliver the service. See our Privacy Policy for the full breakdown.

Reporting a vulnerability

If you believe you've found a security issue, please email info@agencyhr.com. We aim to acknowledge reports within 2 business days. Please do not publicly disclose issues until we've had a chance to investigate and fix them.