Your employees’ data is a trust, and we treat it that way
We build BashKatib on well-known security principles and least-privilege access. These are the main safeguards in place today.
Strict separation between companies
Each company lives in a logically separate space; a user of one company cannot read or change another’s data, and we test this automatically.
Role- and scope-based permissions
Editable roles, and a branch manager only sees their branch. The employee portal is separate from the admin dashboard.
Secure sign-in
Two-factor authentication, passkeys, sign-in rate limits and the option to enforce two-factor for company admins.
Device-bound attendance
One phone per employee by default, and new devices need approval before they can clock in.
Private files
Employee documents are stored privately and opened through short-lived signed links; there are no public links to IDs or contracts.
Audit and masking
We log sensitive changes, exports and salary views, and mask personal fields in logs.
Found a vulnerability or have a security question?
Write to us directly and we will respond as a priority. We value responsible disclosure and take it seriously.
Contact