Security
How we protect your workers' information.
Plain answers about Social Security numbers, access and records.
Where we are
- Social Security numbers encrypted in the appIn place
- Two-step sign-in required for Owners and CoordinatorsIn place
- Independent security testNot yet
- SOC 2Not yet
How we protect your workers' information.
Social Security numbers
- Encrypted inside the application with a key kept outside the database, on top of the host's own protections.
- Screens show the last four digits only.
- Only the agency's Owner can see a full number, and must give a reason; the look-up is logged.
- Never written to logs, payroll files, invoices or AI requests.
Before any AI reading
- Anything shaped like a Social Security number or a date of birth is blacked out of a photo before it is read.
- The reading is asked to leave out identifying numbers even if they appear.
- Spreadsheets and time-clock files are read without AI at all.
Your agency's data, walled off
- The database itself keeps each agency's records apart, so one agency can never read another's.
- Roles decide who sees pay, margin and Social Security numbers; an accountant can read and change nothing.
Signing in
- Owners and Coordinators must use an authenticator app or a passkey as a second step.
- Clients approve through a link that works for one client and one week only.
- Workers sign in to their app with a code sent to their own phone.
An activity log
- Every create, change, approval, export and Social Security number look-up is recorded with who and when.
- Entries are added, never edited or deleted.
Money
- Tabulado never moves money and holds no permission over a bank account. Your payroll provider pays your people.
The demo
- The demo agency is made up. It makes no outside calls, sends no email or texts, and runs the same code as the real product.