Security

• All traffic uses TLS 1.2 or higher. Data at rest is encrypted with AES-256.
• Bank details, PAN and salary fields get an extra layer of field-level encryption.
• Data is hosted in India. Each company's data is kept logically separate.

• Employees, managers and HR see only what their role allows. The same rules apply to the AI agents.
• Single sign-on with Google Workspace and Microsoft, plus two-factor authentication.
• Every sign-in, approval and data change is written to an audit log your admins can view.

• Agents prepare drafts. A person must confirm before anything is sent, paid or changed.
• Each answer links to the record it came from, so it can be checked.
• Your data is not used to train models shared with other customers.

• Hosted on a major cloud provider with certified data centres.
• Daily encrypted backups are stored in a second region and tested every quarter.
• Monitoring around the clock, with on-call engineers for incidents.

• Staff access to customer data is limited, logged and granted only for support you request.
• Every code change is reviewed and scanned for known vulnerabilities before release.
• Independent penetration tests run every year.

If we confirm a breach that affects your data, we will tell your company admins within 72 hours, explain what happened and what we are doing about it, and report it to the authorities as the law requires.

Found a security issue? Email security@peopleagents.com with the details. We reply within one business day and will not take action against good-faith research.