VeltroHRM helps organisations manage employee information through a cloud hosted HR platform. Because HR records can include personal, academic and banking information, access to those records requires care. This overview explains the platform’s security features, the way access is assigned and the steps customers can take to protect their workspaces.
VeltroHRM uses role based permissions to determine the information and functions available to each user. Authorised administrators configure access according to the organisation’s requirements. A user may be restricted to their own personal information, while another authorised role may have access to the employee records needed for its duties.
Access by SolQeff personnel is also limited to authorised persons according to their assigned permissions. Being a member of staff does not automatically provide access to customer or employee records.
Users sign in with a username and password. The platform automatically logs users out after a period of inactivity, requiring them to enter their credentials again before continuing. VeltroHRM does not offer a “Remember me” option.
Automatic logout helps reduce exposure when a signed in device is left unattended. Users should keep passwords private, avoid sharing accounts and sign out when they finish using a shared device. Organisation administrators should review access when employees change roles or leave.
VeltroHRM uses data encryption as part of its protection of information. Encryption works alongside access permissions and secure account practices; each contributes to protecting the information entrusted to the platform.
Regular data backups support recovery when information needs to be restored. Specific recovery arrangements and any agreed recovery commitments should be established in the customer’s service agreement. Customers should consider their operational requirements when agreeing those arrangements.
VeltroHRM is delivered through cloud infrastructure, with customised login URLs for customer workspaces. Organisation settings and permissions remain as configured until changed by an authorised user.
A customised URL provides an organisation specific entry point. Protection of information depends on authentication and access permissions as well as the underlying platform; the URL itself is not a substitute for those controls.
The information held in a workspace depends on the customer’s use of the platform. It can include employee names, contact details, state of residence, photographs, academic information, next of kin details and banking details where payroll services are used.
Religion is an optional field. Users can register without completing it. Customers should collect only information needed for a defined lawful HR purpose and apply particular care to sensitive information. They should explain to employees why their information is collected and who is authorised to access it.
For employee information processed on a customer’s behalf, the customer generally determines the HR purposes and SolQeff processes the information to deliver the agreed service. The Privacy Policy and applicable Data Processing Agreement explain the relevant responsibilities in more detail.
VeltroHRM integrates with Paystack for customers using the relevant payroll service. Access to payroll records should be assigned only to personnel who need it for their responsibilities. Customers should review payroll inputs and authorised payment instructions before processing.
The security settings of a separately operated Paystack account are distinct from the login controls available within VeltroHRM. Customers should protect both accounts and manage the permissions associated with each service.
Customers play an important role in protecting their information. Keep user accounts accurate, assign only necessary access, protect the devices used to access the platform and remove access promptly when it is no longer needed.
Reporting a concern
If you suspect an account compromise, unexpected access or a data protection issue, contact info@solqeff.com promptly. Include the organisation name, a description of the issue and when it occurred. Do not send passwords, authentication codes or unnecessary employee records in an initial report.
Security features reduce risk, but no online service can eliminate every threat. This overview describes the features outlined here; it does not constitute a certification, an independent audit report or a guarantee of uninterrupted availability. Any specific service levels are set out in the applicable agreement.
For questions about VeltroHRM security, data handling or customer service arrangements, contact us.
SolQeff Limited
Plot 5, Poju Adeyemo Close, Gbagada, Lagos, Nigeria
Email: info@solqeff.com
Website: www.veltrohrm.com