Security

Careful with your people’s data.

Staff records, attendance and pay are sensitive. This page describes what the product does about it today — in plain words, and nothing more than is true.

Ask us a security question

Access control

Who can get in, and what they can reach.

Five roles — Super Admin, Admin, HR, Supervisor and Staff — each with its own reach
Every action is checked on the server, so hiding a button is never the only protection
Our own platform operators are a separate kind of account, kept apart from your users

User permissions

Page by page, role by role.

Page access is set per role, then adjusted by job title and, for supervisors, by department
Sensitive areas — pay, passports, exit interviews — are closed to supervisors by default
Nobody approves their own leave or claim
Once a company has a Super Admin, only a Super Admin can create or change Admins

Data protection

How records are kept and separated.

Every company’s records are kept separate from every other company’s
Files and images are stored in a folder per company, and links are checked against it
Passwords are stored hashed, never in plain text
One-time codes are stored hashed, expire, and allow a limited number of attempts
Traffic between your devices and the platform is encrypted (HTTPS)

Account security

What protects each sign-in.

Sign in with a username or email; people choose their own password on first sign-in
Sign-in attempts are rate-limited, and a failed sign-in never reveals whether an account exists
Staff accounts hold one active app session — signing in on a new phone asks to replace the old one
Changing a password signs out every other device
A new email address is confirmed with a six-digit code before it is used

Reliability & data integrity

So the numbers stay right.

A finalised payroll is frozen — later edits never restate it
A claim or a commission cannot be paid twice, even if a button is pressed twice
Invoice numbers run without gaps, as tax rules expect
Approvals keep who signed, in what role and when, even if a profile changes later
The app opens from the last known state, so a slow connection does not block the day

Let’s talk

Give your team a better working day.

Tell us how your operation runs. We’ll show you what JobToFive looks like around it, and prepare a proposal for your team.

Discuss your requirements Request a custom proposal