Security
Employee data deserves care
Leave records can contain sensitive data such as health information. İzin360 was designed from the start to protect it.
Each company's data kept apart
Your company's records are separated from other companies at database level; users of one company cannot access another company's data.
Sensitive fields encrypted
National ID number, salary and date of birth are stored encrypted. Uploaded documents are encrypted with company-specific keys and virus-scanned.
Two-factor authentication
Two-step sign-in with an authenticator app (TOTP). Two-factor authentication is mandatory to view health documents.
Strong password policy
Passwords of at least 12 characters, rejection of passwords found in known data breaches, and secure hashing for storage.
Session security
Session tokens are kept in the browser only in cookies that scripts can't read; the refresh token changes on every use, and the session is closed if misuse is detected.
Audit log
Important actions are written to a chained log; its integrity can be verified and it can be exported as CSV.
Role-based access
Owner, HR manager, HR specialist, line manager, employee and billing admin roles; everyone sees only what their job requires.
Privacy for health information
For health-related leave such as sick notes, colleagues only see “On leave”; only the employee, their manager and HR see the leave type.
Tools for your KVKK obligations are built in too
Privacy notice and read receipts, 30-day deadline tracking for data subject requests, personal data export, retention periods, anonymisation and legal holds.
Found a security issue?
Please send us the details through the contact form; we prioritise these reports. Talk to us
Try it with your own data
Try it free for 30 days; no card needed. Request a demo if you have questions.