PORTAL SECURITY
Designed for separated, accountable access
The Simplified Portal uses account authentication, role-based authorization, company-scoped queries and recorded activity to support accountable HR operations.
Role-based access
Super Administrator, HR Staff, Client Administrator and Employee accounts receive different navigation and server-enforced action permissions. New users activate their own password through a one-time invitation.
Company separation
HR staff receive only assigned company workspaces; client administrators receive their own company; employees receive permitted personal records. Access checks are applied by the server before records or files are returned.
Passwords and sessions
Passwords are stored as salted, computationally derived hashes rather than readable text. Sign-in creates a secure, HTTP-only session cookie with a limited lifetime. Do not share passwords or invitation links.
Files and sensitive workflows
Authorized users may upload supported documents and profile images up to 25 MB. Payroll and NIB screens organize preparation and approvals; they do not themselves move money, connect to bank accounts or submit statutory filings.
Audit and accountability
Company creation, employee records, timesheets, leave decisions, recruitment changes, payroll status changes, invitations, uploads and access removal create activity records identifying the acting user.
Report a concern
If you believe an account or invitation has been exposed, contact Simplified Outsourcing promptly so access can be removed and active sessions ended.
