Granular permissions
By group, by module, by document folder - and by scope group (team, site, department) to limit what a manager sees to their own perimeter.
Define who sees what, exactly
Granular permissions by group and by module, 2FA, SSO, login audit trail - every sensitive HR record stays in place, accessible only to the people who need to see it.
Built for the HR data you never want leaking out
2FA & SSO included
TOTP two-factor authentication on every account. SSO with Azure AD, OIDC or CTIE eAccess (Luxembourg) - three providers to choose from, included from your very first account.
Login audit trail
Every login logged with timestamp, IP and authentication type. Sensitive changes (address, IBAN, banking details) are recorded with before/after values.
DAY-TO-DAY SECURITY
The security toolkit, delivered out of the box
Enterprise-grade controls on every myHR account, even the smallest - no paid add-on, no "enterprise tier" to unlock.
Custom groups
Create the groups that match your organisation - HR Admin, HR Manager, Manager, Employee, External.
Permissions by module
Leave, payroll, records, scheduling, training - each module has its own rights, assignable by group.
Permissions by folder
Differentiated access to document folders - a manager doesn't see medical records, payslips stay private.
Scope by target group
A group can be limited to a team, a site or a department - the manager only sees their own perimeter.
TOTP 2FA
Two-factor authentication via app (Google Authenticator, Authy, 1Password) - enabled per account or enforced company-wide.
3 SSO providers
Azure AD, generic OIDC, CTIE eAccess (Luxembourg) - three ready-made integrations, configurable without development.
Session expiration
Automatic logout after 8 hours of inactivity - configurable password policies (length, complexity, characters).
Login log
Full login history (date, time, IP, authentication type) and log of sensitive changes with before/after values.
Reassure your DPO in a single meeting
Our security documentation, the DPA and our compliance posture - ready to forward to your legal team on request.