# Security and privacy at Peoplo.ai URL: https://peoplo.ai/security/ > How Peoplo.ai protects employee data: AES-256 encryption, two-step sign-in, roles, an audit log, privacy tools, sub-processors and human control of AI. People, companies and figures in product examples on this page are sample data, not customers. Trust and security # Trust and security at Peoplo.ai Peoplo.ai holds sensitive information about people and their pay. This page says plainly how we protect it today, and what we are still working on. It only lists what Peoplo.ai does now. ISO 9001:2015 and ISO 27001 certifications are held by the company behind Peoplo.ai. Built for GDPR and SOC 2, with tools for India’s DPDP Act. No SOC 2 certificate yet. ## Your data is encrypted - Personal details such as names, email addresses, phone numbers, dates of birth, bank details and ID and tax numbers are encrypted when stored (AES-256-GCM), with a key for each company. - ID document numbers are stored encrypted. Screens show only the last few characters unless someone allowed to see the full number asks for it, and that is recorded. - Data is encrypted in transit between your browser and Peoplo.ai. - Secrets such as encryption and sign-in keys are kept in Azure Key Vault, not in the code. ## Signing in - Two-step sign-in with an authenticator app, with one-time recovery codes. - It is always required for Peoplo.ai’s own platform administrators. A company can require it for its administrators, and it is switched on by default for companies that sign up themselves. - Your company can let people sign in with Google or Microsoft. ## Who sees what - Every person has a role: admin, HR, manager or employee. Managers see their own team; employees see their own records. - Sensitive certificates, such as medical ones, are shown only to the person and HR. - Important changes are written to an audit log: who did what, and when. ## Privacy tools for your company - **Export:** HR can export everything Peoplo.ai holds about one person, as a file and a readable summary, to answer a data access request under GDPR or India’s DPDP Act. - **Erasure:** HR can anonymise a former employee once the records they must keep by law are no longer needed. - **Retention:** HR can clear old email logs, notifications and audit entries, always after a dry run that shows what would go. - The list of service providers that process data for us is shown in Peoplo.ai under **Settings, Privacy** . ## AI you stay in control of - Each AI feature can be switched on or off for your company in **Settings, AI controls** . - Kili reads data as the person who is asking, with their permissions. It never receives bank details, ID or tax numbers or leave reasons, and pay figures only on pay pages. - Kili answers link to the records they came from, so you can check them. - AI does not change pay, tax, salaries or anyone’s record on its own. It prepares the change, and a person reviews and confirms it. The AI team’s agents suggest actions; payroll, salary, hiring, money and anything that deletes data always wait for a person to approve. - During go-live set-up, Kili can save simple company facts you type in the chat (such as departments or locations) straight away, with an Undo. ## How we build Peoplo.ai We are switching on these automatic checks for every change in our build pipeline: - Code scanning for security problems (Semgrep). - Dependency checks for known vulnerabilities (osv-scanner and npm audit) and allowed licences. - Secret scanning, so keys and passwords do not end up in the code (gitleaks). - A software bill of materials for each part of the product. - Before a release, the container image is scanned for vulnerabilities and configuration problems (Trivy). ## Service providers (sub-processors) The providers below are the intended setup for companies hosted in India, our planned home region. Today Peoplo.ai runs in a single Azure region (East US) while we move there, so some locations below are not live yet: - **Microsoft Azure:** hosting and file storage (Central India). - **MongoDB Atlas:** database (Mumbai). - **Amazon Web Services (SES):** email (Mumbai). - **Microsoft Azure OpenAI:** AI features (India or the nearest Azure region). - **Anthropic:** AI features, only when Azure OpenAI is not set up (United States). - **Dodo Payments:** subscription payments, company billing details only (United States). - **Cloudflare (Turnstile):** checking that a sign-up is made by a person. - **Parallel Web Systems:** only if your company switches on the optional “Fill from my LinkedIn profile” lookup. It is off by default. ## Hosting - Today Peoplo.ai runs on Microsoft Azure in a single region (East US), with the database on MongoDB Atlas. - MongoDB Atlas keeps backups of the database. ## What we are working on These are plans, not things that are done: - Preparing for a SOC 2 audit. - Moving our main hosting to India, and adding hosting in the UAE and the EU, so companies can keep their data in their region. - Regular tests that restore backups, and central security logging with alerts. ## Contact Questions about security or privacy, and reports of security problems: [privacy@peoplo.ai](mailto:privacy@peoplo.ai) . Please tell us what you found and how to reproduce it, and give us time to fix it before sharing it.