Our Commitment
Protecting your workforce data is central to WorkTree. We implement multiple layers of security to keep attendance records, payroll data, and personal information safe.
Encryption
All data transmitted between your device and our servers is encrypted using TLS 1.2+. Data at rest is encrypted using AES-256 encryption on our cloud infrastructure.
Authentication
WorkTree uses OTP-based mobile authentication and secure JWT tokens. Sessions expire automatically, and you can log out of all devices from account settings.
Access Controls
Role-based permissions ensure workers only see their own data, while owners and co-owners access only what their role permits. All administrative actions are logged.
Infrastructure
Our services run on secure cloud infrastructure with regular security patches, automated backups, and 99.9% uptime monitoring.
Incident Response
We have a documented incident response plan. In the event of a data breach affecting your organization, we will notify affected users within 72 hours as required by applicable law.
Report a Vulnerability
If you discover a security vulnerability, please report it responsibly to hello@groupbox.co. We appreciate responsible disclosure and will respond within 48 hours.