Your data stays separate from other companies
Every company on Circumz has its own private space. The system itself prevents one company from seeing another company's records, not just the screens.
Signing in
- Passwords are stored in a scrambled form that we cannot read back, and must be long and hard to guess.
- Two-step sign-in with an authenticator app, and passkeys. A company can require it for everyone.
- Accounts lock for a short time after repeated wrong passwords, and sign-in attempts are rate limited.
- Sessions expire. Admins can see who is signed in and sign a device out. Changing a password signs out the other devices.
- Single sign-on through your own identity provider (OpenID Connect) and automatic user management (SCIM) for companies that need them.
- You can limit access to your company's office or VPN addresses.
Who can see what
Each person gets a role, and each module and action has its own permission. Pay data has its own permission, so access to HR does not show salaries unless you also grant payroll access.
Audit log
Sign-ins, failed attempts, password and role changes, access changes and report exports are written to a log that cannot be edited or deleted, and any tampering shows up in an integrity check. Admins can view it, export it with a digital signature, or stream it to their own security tools.
Encryption
Secrets such as authenticator keys are encrypted before they are stored. The service refuses to start in production without its encryption key and with insecure settings.
Backups
Where your data is hosted
Uptime
Independent testing
Report a security problem
If you think you have found a weakness, please email [email protected] with the subject "Security report". Tell us what you found and how to reproduce it. We will reply within one business day, and we ask that you give us reasonable time to fix a problem before sharing it.
Security questionnaire from your buyer or auditor? Contact us.