Legal
Security
Rosterflux handles payroll and workforce data, so security is foundational. This page summarises our approach.
Architecture
Rosterflux is a multi-tenant platform. Each agency's data is isolated from every other agency's at the database level, using row-level security.
Encryption
Data is encrypted in transit (TLS) and at rest. Sensitive fields, such as tax file numbers, receive additional protection.
Data residency
Our database is stored in Sydney, Australia, supporting the residency requirements common in healthcare, aged-care and government procurement.
Access control
Role-based access controls scope what each user can see and do. Access to production systems is restricted and logged.
Backups and recovery
Managed databases provide automated backups, so payroll and workforce data can be recovered.
Responsible disclosure
If you believe you've found a security issue, please contact security@rosterflux.com so we can investigate promptly.