Your employee data, protected by design
HR data is sensitive. Security is built into every layer of Operio, not added later.
Tenant isolation
Every database query is filtered by company. A user from one company can never read the data of another.
Separate subdomain & session
Each company signs in only on its own subdomain, with its own session cookie.
Two-factor authentication
2FA with Google Authenticator, Microsoft Authenticator or Authy for administrators and employees.
Encrypted connection
HTTPS everywhere with HSTS, secure cookies and strict security headers.
Brute-force protection
Accounts are locked temporarily after repeated failed sign-in attempts.
Audit log
Sign-ins, failed attempts, password and role changes are recorded with IP and device.
Private documents
Contracts and documents are stored outside the public folder and served only to authorised users.
Granular permissions
Roles decide exactly who can view, create, edit, approve or delete in every module.
Backups
Regular database backups and the right to export or delete your data at any time.
Ready to modernise how you manage your team?
We show you the platform with your own company data and set up your workspace for you.