Encryption
Data in transit uses TLS. The product is designed to encrypt stored records at rest. We will publish cipher and key-handling detail to customers under NDA, not as a homepage badge.
Security and trust
Controls you can describe. No invented badges.
Peer Roll handles employee records, time evidence, and documents. Here is how we talk about encryption, access, and backups without pretending we already hold certifications we have not published.
What this page does not claim
We do not list SOC 2 or ISO 27001. If a later report exists, it will appear here with a date. Until then, treat any third-party “Peer Roll is certified” line as false.
Access controls
Role-based access for operators, managers, and employees. Sensitive fields are not on the default manager view. Shared passwords are a failure mode we refuse to design for.
Recorded actions
Sensitive actions like pay changes, terminations and sign-in tokens are recorded with who and when.
Backups
The operating plan is regular encrypted backups with a restore path you can ask us to demonstrate. Retention windows will be written into customer agreements, not guessed here.
Roles you can walk through
The day-to-day question is simple: who is allowed to see this? Operators run people ops. Managers approve work for their team. Employees punch, request leave, and finish their own tasks. Roles and access covers the product split. This page is the trust story around it.
- Least privilege is the default. Extra access is granted.
- HR-only notes never sit on the manager digest or team attention email.
- A founder wearing two hats still has two roles — not one shared password.
Roles and access · Example Co.
Roles
Example Co.
HR admin
Sees pay. Employees see only their own rate.
Manager
Time, leave, and coverage. Not team pay.
Employee
Clock, Time off, and Me.
What we expect to hold
You decide what you put in the file. We design as if some of it will be sensitive. We do not ask you to move a hospital chart into Peer Roll.
Identity and job data
Names, contact details, site, manager, employment type, and status. This is the directory. Managers see what they need to run a team.
Time evidence
Punches, device, IP, and location when provided. Needed for attendance and wage-hour questions. Not a public feed.
Leave and documents
Balances, requests, e-sign packets, acknowledgements, and the document library on the e-file. Some files are routine. Some are not. Roles decide.
HR-only notes
Operator context that must not appear in a manager queue or an employee profile.
Direct answers
Send this page to counsel before you send a roster.
30-day free trial, no credit card needed. Then $4 per active person per month. The time clock is included.