Security
Security, in plain English
Onboarding means holding Social Security numbers, birth dates and identity documents for people who trusted you with them. Here is how Staffily protects that information, without the jargon.
The controls
What protects your applicants’ data
Who can sign in
- Your staff sign in with Microsoft Entra ID accounts protected by multi-factor authentication.
- Applicant PINs are stored only as a one-way hash, never as the PIN itself.
- One-time sign-in codes are rate-limited.
Your data stays yours
- Every agency’s data is kept separate from every other agency’s.
- That separation is enforced twice: by the application, and independently by row-level security in the database.
Encryption
- Data is encrypted in transit (TLS 1.2 or later) and at rest.
- More than 100 columns of personal data — including Social Security numbers, dates of birth, names, addresses and I-9 document numbers — are additionally encrypted with SQL Server Always Encrypted.
- With Always Encrypted, even database administrators see only ciphertext.
Keys
- Encryption keys are held in Azure Key Vault with purge protection turned on.
- The application can use a key but can never export it.
- No database passwords are used, so there are none to leak.
Off the public internet
- The database, document storage and key vault cannot be reached from the public internet.
- The web applications accept traffic only through a protected edge connection.
Uploaded files
- Every uploaded file is quarantined and scanned for malware before anyone can open it.
Logs you can rely on
- Access and change logs are append-only ledger tables.
- Entries cannot be altered or deleted, and tampering is detectable.
Monitoring
- Microsoft Defender for Cloud monitors the database, storage, keys and containers.
Hosting and backups
Hosted on Microsoft Azure, in the United States
Backups are kept on the schedule below, with copies in a second Azure region.
- Point-in-time restore
- 7 days
- Weekly backups kept
- 5 weeks
- Monthly backups kept
- 12 months
- Deleted documents recoverable for
- 30 days
How changes ship
Tested before it reaches you
Every change passes more than 2,000 automated tests, including tests that hold the security rules and the I-9 rules in place.
Every change runs in a separate staging environment first, before it reaches the system your branches use.
Questions from your IT or compliance team?
Bring them to the demo. We will walk through how each of these controls works.