Trust and security at Peoplo.ai

Your data is encrypted

• Personal details such as names, email addresses, phone numbers, dates of birth, bank details and ID and tax numbers are encrypted when stored (AES-256-GCM), with a key for each company.
• ID document numbers are stored encrypted. Screens show only the last few characters unless someone allowed to see the full number asks for it, and that is recorded.
• Data is encrypted in transit between your browser and Peoplo.ai.
• Secrets such as encryption and sign-in keys are kept in Azure Key Vault, not in the code.

Signing in

• Two-step sign-in with an authenticator app, with one-time recovery codes.
• It is always required for Peoplo.ai’s own platform administrators. A company can require it for its administrators, and it is switched on by default for companies that sign up themselves.
• Your company can let people sign in with Google or Microsoft.

Who sees what

• Every person has a role: admin, HR, manager or employee. Managers see their own team; employees see their own records.
• Sensitive certificates, such as medical ones, are shown only to the person and HR.
• Important changes are written to an audit log: who did what, and when.

Privacy tools for your company

• Export: HR can export everything Peoplo.ai holds about one person, as a file and a readable summary, to answer a data access request under GDPR or India’s DPDP Act.
• Erasure: HR can anonymise a former employee once the records they must keep by law are no longer needed.
• Retention: HR can clear old email logs, notifications and audit entries, always after a dry run that shows what would go.
• The list of service providers that process data for us is shown in Peoplo.ai under Settings, Privacy.

AI you stay in control of

• Each AI feature can be switched on or off for your company in Settings, AI controls.
• Kili reads data as the person who is asking, with their permissions. It never receives bank details, ID or tax numbers or leave reasons, and pay figures only on pay pages.
• Kili answers link to the records they came from, so you can check them.
• AI does not change pay, tax, salaries or anyone’s record on its own. It prepares the change, and a person reviews and confirms it. The AI team’s agents suggest actions; payroll, salary, hiring, money and anything that deletes data always wait for a person to approve.
• During go-live set-up, Kili can save simple company facts you type in the chat (such as departments or locations) straight away, with an Undo.

How we build Peoplo.ai

We are switching on these automatic checks for every change in our build pipeline:

• Code scanning for security problems (Semgrep).
• Dependency checks for known vulnerabilities (osv-scanner and npm audit) and allowed licences.
• Secret scanning, so keys and passwords do not end up in the code (gitleaks).
• A software bill of materials for each part of the product.
• Before a release, the container image is scanned for vulnerabilities and configuration problems (Trivy).