Salary data, handled like salary data.
Payroll holds the most sensitive data a company keeps. These are the controls around it.
Controls
- Role-based access
- Multi-factor sign-in
- Encrypted in transit and at rest
- Immutable audit log
- Daily backups
- Sessions expire when idle
Access by role
Each person sees what their role needs, nothing more. System Admins manage users and settings, not salaries.
| Role | Can |
|---|---|
| HR Admin | Manage all HR records and policies |
| Payroll Officer | Prepare and run payroll |
| Finance | Approve and release payroll |
| Manager | Approve team leave, view direct reports |
| Employee | Self-service only |
| System Admin | Users, integrations, settings |
Audit log
Every HR and payroll action is recorded and can't be edited or deleted.
- Who made the change, and when
- Approvals and the run they locked
- Adjustments and reversals after approval
Data protection
Data handled under Kenya's Data Protection Act 2019.
Security questions or a report: hello@octahr.africa
Run your next payroll on OctaHr.
We'll import your staff and run one payroll alongside your current process so you can compare before switching.