Security & Data

HR systems hold some of the most sensitive data in a company: salaries, bank details, PAN and Aadhaar numbers, and personal information. This article explains how Qrew HR protects that data and what admins can do to keep their account secure.

For our formal commitments, see the Security page and the Privacy Policy.

How Qrew HR protects your data

Role-based access: every user sees only the modules and records their role allows. Salary and bank fields can be hidden from roles that don't need them.
Encrypted connections: the web app and mobile app connect over HTTPS, so data is encrypted in transit.
Audit trails: important actions, such as changes to employee records, roles, and payroll approvals, are logged with who made them and when.
Data export on request: you can request a copy of your organization's data.

1. Review who has access

Go to Settings → Roles & Permissions.
Check the members of each role, especially Admin and any role with payroll access.
Remove access for anyone who no longer needs it. See Roles & Permissions.

2. Remove access promptly when people leave

When an employee exits, mark them as exited with their last working day.
Their sign-in stops working, while their records stay available for final settlement and compliance.
If the person was an admin, check that at least one other admin remains.

3. Strengthen sign-in

Ask every user to choose a strong, unique password and never share it.
If your organization uses a central work account, consider single sign-on. See Integrations.
Sign out of shared or public computers after use.

4. Review the audit trail

Admins can open Settings → Audit Log.
Filter by user, module, or date to see what changed, for example who edited a salary or approved a payroll run.
Review it regularly and whenever something looks unexpected.

5. Handle exports carefully

Limit export permission to people who genuinely need data outside Qrew HR.
Store exported files in a secure, access-controlled location and delete local copies you no longer need.
Avoid emailing spreadsheets that contain salaries or ID numbers.

6. Request a full data export

To receive a copy of your organization's data, for example for an internal audit or before cancelling, an admin can write to support@qrewhr.com from their registered email address. We will confirm the request and share the export securely.

Tip: Set a quarterly reminder to review admin users, payroll access, and export permissions. It takes ten minutes and closes the most common gaps.

Common questions

Can Qrew HR staff see our data?

Access is limited to what is needed to provide the service and support you, for example when you ask us to investigate an issue. See the Privacy Policy for details.

How do I report a security concern?

Email support@qrewhr.com with as much detail as you can. Please don't include passwords or full ID numbers in the email.

Can an employee ask what data we hold about them?

Employees can see their own profile, documents, and payslips in Qrew HR. For anything else, they should contact your HR team, who can export the relevant records.