HR data security with access rules down to each employee field

Set who sees salaries, contacts and documents by department or job title, require SSO and two-factor sign-in, and check every change in audit reports.

HR data security with access rules down to each employee field
icon

Leader

Summer 2026
icon

Users Love Us

Milestone Summer 2026
icon

Regional Leader

Europe Summer 2026
icon

High Performer

Europe Summer 2026

Security and operational continuity

Certifications, granular access and full control over what happens to your data and equipment.

ISO 27001 certified, GDPR compliant, Google Cloud data centres in Europe
G2Best Support

Access rules

Rule-based roles and data scope

Roles in PeopleForce follow your company structure instead of a list of names. You define who holds a role and whose data it opens. Both are conditions, so access updates as people join, change department or leave.

  • Role membership by conditions

    Assign a role to everyone who matches conditions such as department, location or job title. New employees who match receive the role automatically, and people who stop matching lose it.

  • Data scope for each role

  • Manager and team lead access

preview

Field permissions

Field-level permissions for employee data

For every field on the employee profile, including custom fields, a role gets no access, view or edit. Salaries, emergency contacts, children, notes and documents stay closed to a new role until you open them. Administrators see all data.

  • Tables and columns

    Profile tables open as a whole or column by column, with a separate permission for past and scheduled records.

  • Document folders and forms

  • Reports and settings

preview

Sign-in

Single sign-on and two-factor authentication

Connect Google, Microsoft, a SAML identity provider or LDAP. Enforce SSO login blocks password sign-in on the server.

  • Company-wide two-factor authentication

    Require an authenticator app code from everyone, including after SSO sign-in.

  • Email code for administrators

  • Password rules and session timeout

preview

Recruiting access

External recruiter and candidate data access

External recruiters work only with the vacancies they are added to and, by default, see only the candidates they bring in. Inside the team, candidate salary expectations and sensitive candidate details are separate permissions, so a hiring manager can review a candidate without seeing either.

External recruiter and candidate data access

Audit

Security audit, system log and data change history

Three reports answer the questions an auditor asks: who can sign in, who did what, and how employee data changed.

Who can sign in
Security audit report

Security audit report

Lists every active employee with self-service access, two-factor status, last sign-in, last activity and last password change, plus last sign-in IP when IP tracking is on. The report can be exported.

Who did what
System log

System log

Records changes to employee data made in the web app and through the public API, with the person who made each change, the time, the IP address and the device.

What changed
People data changes

People data changes

Shows the history of salary, position, compensation, employment status and other profile records: what changed, who changed it and when.

More in Core HR

Explore the rest of Core HR

Everything around your employee records, from the directory and documents to equipment and candidate consent, in one connected system.

All employee data in one place

Profiles with job, contact and personal details, with each field open to a role as no access, view or edit.

Learn more
Employee directory

Beyond the features

Why HR teams choose PeopleForce

We get you live in weeks, not months — with real people answering after go-live, and room to add the rest of HR when you're ready.

Live in about four weeks

A dedicated success manager sets everything up with you — it's included in the plan, not a paid add-on.

Support in your language

Real people, not a ticket queue: a ~2-minute first reply and 98% satisfaction.

Room to grow

Start with Core HR and add recruiting or performance later — same employee record, no second system.

Questions about HR data security

Can a manager see the salaries of their reports?

Can password sign-in stay on while we move to SSO?

Which sign-in providers are supported?

Can two-factor authentication be mandatory?

How does PeopleForce support GDPR in recruiting?

See access rules set up for your structure

Walk through roles, field permissions, SSO and audit reports with a product specialist.