Security built into every login and every app
Your business trusts us with its people and its data. Here is how we protect both.
How we protect you
One identity
Every app checks each request with the central efiqone identity service before it shows any data.
Data isolation
Every record carries its organization, and every query is limited to it. One company can never see another's data.
Separate app databases
Each app keeps its own data in its own database. Identity lives in one place; business data lives with the app that owns it.
Role based access
Access rules are enforced on our servers, not just hidden on screen.
Admin limits
Nobody can grant access they were never given. A branch admin cannot enable an app the parent company did not pass down.
Private onboarding
Employees set their own passwords with a one time code on their own phone. Admins never see them.
Safe app handoff
Opening an app uses a single use pass that expires in 60 seconds.
Instant offboarding
Switch someone off and access ends across every app within a minute.
Activity log
Logins, invites, access changes and app launches are recorded.
Secure sessions
Short lived sign in tokens that refresh safely, stored in the phone's secure keychain on mobile.
Where your data lives
Your data is hosted on Railway. Backups run every 30 days and are kept for 89 days.
Our promise
We will be open about how we handle your data, quick to respond to any concern, and honest if anything ever goes wrong.
Report a vulnerability
Found a security issue? Write to [email protected] with the details. We will acknowledge your report within 2 business days and keep you updated until it is fixed.
Have a security question or need our data protection details for your review? Write to our team and we will respond within one business day.
Contact our security team