Security & trust

Security and data residency, in plain English.

You're trusting us with people's personal details and your clients' information. Here's how we look after it — no jargon.

Security shouldn't need a translator. You're an HR or operations leader, not a penetration tester, so here's what matters about how Workhr keeps your data safe, where it lives, and who can see it — in language that makes sense.

01 / RESIDENCY

Where your data lives

Your data is hosted in Australia and stays in the region — not shuffled around the world.

  • Hosted in Australia (Sydney region)
  • Kept in-region, not moved offshore
  • Backed up and recoverable
Data residency
RegionAustralia (Sydney)
In transitEncrypted (TLS)
At restEncrypted
02 / ISOLATION

One tenant can never see another

Every agency's data is walled off from every other agency on the platform.

  • Row-level security separates every tenant
  • Enforced at the database, not just the app
  • Tested with cross-tenant checks
03 / ACCESS

People see only what their role allows

Inside your own organisation, access follows the job — a worker sees their shifts, not your margins.

  • Role-based access for staff, workers and clients
  • Workers and clients see only their own information
  • Sign-in protected by multi-factor
04 / AUDIT

A tamper-evident record of what happened

Sensitive actions are written to a hash-chained audit log, so the history can't be quietly altered.

  • Every sensitive action recorded
  • Hash-chained so records can't be silently changed
  • Answers 'who did what, and when'
05 / PRIVACY

Aligned to NZ and Australian privacy law

Built for how New Zealand and Australia expect personal information to be handled.

  • Aligned to the NZ Privacy Act 2020 and Australian Privacy Principles
  • You decide what's shared, per tenant
  • Clear on what we collect and why

Why it matters for your desk

In-region

Data hosted in Australia and kept there.

Isolated

Tenants can never see each other's data.

Accountable

A tamper-evident trail of every sensitive action.

Ask us the hard security questions.

Book a demo — we'll walk your team through it.