Security built into the platform, not bolted on
Every Axel Henry tenant benefits from role-based access control, configurable permissions, single sign-on and full audit logging as standard.
Role-Based Access Control
Nine system-defined roles out of the box, plus unlimited custom roles built from a granular, database-backed permission catalogue spanning every module.
Configurable Permissions
Every permission carries a visibility scope — self, team, business unit, or company-wide — so access always matches organisational structure, not a fixed template.
Multi-Factor Authentication
MFA can be enabled per user and enforced centrally by administrators from the Admin Control Centre.
Single Sign-On
Sign in with your existing corporate identity provider instead of managing another password.
Microsoft Entra ID Integration
Native SSO integration with Microsoft Entra ID (Azure AD), alongside Google Workspace SSO.
Audit Logging
Every sensitive action — approvals, permission changes, promotion decisions and more — is written to a company-scoped audit log.
Account Protection
Automatic account lockout after repeated failed sign-in attempts, with configurable password and session policy.
GDPR-Aware Data Handling
Candidate records include explicit GDPR consent tracking, and employee data visibility is always scoped by role and permission.
Permission-Aware AI (Axel Henry Pulse)
Pulse, our built-in HR assistant, works within the exact same role and permission model as the rest of the platform — it can never surface, recommend or act on data a user isn't already authorised to see.
Encryption
Passwords are hashed with industry-standard bcrypt; data is encrypted in transit via HTTPS/TLS end-to-end.
Secure, Tenant-Isolated Architecture
Every tenant's data is isolated at the query layer by company, so no customer can ever see another customer's data.
Data Retention & Lifecycle
Structured leaver/offboarding processes ensure employee records are handled consistently when someone leaves the organisation.
Backup & Recovery
Hosted on managed, redundant cloud infrastructure with automated database backups.
A live view of your security and compliance posture
Axel Henry’s platform team tracks security controls, data-protection evidence and production readiness continuously — with scored controls, priorities and status so nothing is left to guesswork.
- Scored security, data-protection and production-readiness controls
- Evidence and approval status tracked per control
- Priorities surfaced so gaps are addressed first
Tenant-isolated by design
Every customer's data is isolated at the query layer by company — no customer can ever access another customer's records, and every request is scoped to your organisation.
One secure, isolated tenant per organisation
Have a security questionnaire to complete?
Our team can walk your security or compliance team through our architecture directly.