Legal
Security
Rosterflux handles payroll and workforce data, so security is foundational. This page summarises our approach.
Architecture
Rosterflux is built on a single-tenant architecture, keeping each agency's data isolated.
Encryption
Data is encrypted in transit (TLS) and at rest. Sensitive fields, such as tax file numbers, receive additional protection.
Data residency
Platform data is hosted in Australia, supporting the residency requirements common in healthcare, aged-care and government procurement.
Access control
Role-based access controls scope what each user can see and do. Access to production systems is restricted and logged.
Backups and recovery
Managed databases provide automated backups, so payroll and workforce data can be recovered.
Responsible disclosure
If you believe you've found a security issue, please contact security@rosterflux.com so we can investigate promptly.