Roles & Permissions
Granular, per-organization RBAC - assign exactly the right access to every role, out of the box or custom.
Read more All features
Audit Logs & Security
Activity logs, secure sign-in, and role-based access that keep HR data safe and accountable.
Overview
Audit Logs & Security gives you accountability: a record of who did what and when, plus the protections that keep people’s data safe.
Sign-in uses short-lived access tokens with rotating refresh tokens, access follows roles, and each organisation’s data is isolated from the others.
How it works - step by step
- 1Roles and permissions control access from day one.
- 2People sign in securely with their own account.
- 3Important actions are recorded in the activity log.
- 4Administrators review the log when needed.
- 5API usage is recorded in the API logs.
- 6Suspicious access is investigated and revoked.
Key capabilities
- An activity log of important actions in the organisation.
- Short-lived sign-in tokens with rotating refresh tokens.
- Role-based access to every module.
- Tenant-isolated data between organisations.
- API logs for key usage.
- Security settings managed by administrators.
Benefits
- Accountability for changes.
- Evidence for audits.
- Reduced risk of misuse.
- Confidence for employees and leaders.
Who gets what
- Admins: a complete record and control over access.
- Security and compliance: evidence for audits.
- Everyone: data protected by least-privilege access.
What it replaces
- Shared logins and passwords.
- No record of who changed what.
- Open access to sensitive files.
Common questions
Is my data separate from other organisations?
Yes. EvoqHR is multi-tenant with tenant-isolated data.
Can I see who changed something?
Yes. The activity log records important actions with who performed them.
See Audit Logs & Security in action
Review the activity log monthly - it is the fastest way to catch access that has drifted.
You may also like
More to read, picked for the topics on this page.