iHRSYS

iHRSYS

Security & compliance

Tenant isolation, regional residency, RLS, Entra JWKS, and AI kill switches — designed for regulated HR.

  • Postgres RLS on tenant-scoped tables; parametric isolation tests in CI.
  • Workforce auth via Microsoft Entra (JWKS) — no product password store.
  • AI Gateway fail-closed flags; data never used for model training.
  • Disbursement port is files-not-payments (ADR 010) — no bank push.

Status badge sample (theme audit)

DraftPendingApprovedRejectedCancelledEscalated