Skip to content
Kopje HR

Security & data protection

Payroll, ID numbers, bank details and disciplinary records are some of the most sensitive data a business holds. This is how Kopje HR looks after them.

A separate database for every company

Your records never share tables with another customer. Files are stored in your own area too, and every release is tested to prove one company can't see another's data.

Encryption of sensitive fields

National ID, tax and NSSA numbers, bank accounts, medical and grievance notes are encrypted in the database, not just on the disk.

Two-factor sign-in

System administrators, HR, payroll and general managers confirm sign-in with an authenticator app. Platform staff always use two-factor authentication.

Least privilege

Roles decide what each person sees — pay, banking and discipline need their own permissions, and supervisors only see the properties they manage.

A complete audit trail

Who changed what, when, the old and new value, and from where. Finalised payroll, clock events and approved records are never edited — corrections are new entries.

Backups and your data

Each company's database and files are backed up nightly, encrypted, to two locations, and restores are tested. You can ask for a full export of your data at any time.

Support only when you allow it

Our console has no screens showing your employees, pay or documents. Support can sign in to your account only while you switch it on, with a reason, a time limit and a visible banner — and every session is listed for you.

Cyber and Data Protection Act

Built to support your obligations under Zimbabwe's Cyber and Data Protection Act: consent for reference checks, purpose-limited access and retention controls.

Questions from your IT or legal team? Get in touch — we can share our data processing agreement and hosting details.