Help Centre
How your data is protected
The main ways Workforce Ignite keeps your organisation's information private and secure, and what you can do too.
What we do
- Your data is walled off. Each organisation's records are separated inside the database itself, not just by the app, so one organisation can't see another's.
- Every request is checked. Your sign-in is verified on every action, and what you can do depends on your role and menu access — checked by the server, not just hidden on screen.
- Sign-in protection. After a few wrong passwords the account is locked for a short, increasing time, sign-in pages use Cloudflare's security check to stop bots, and password resets need both the email and the mobile on the account.
- Uploads are checked. Files must genuinely be PDF, JPEG, PNG or HEIC, and are stored privately.
- Links are single-purpose. Upload, reference and password links each do one thing for one person, and expire.
- Safe exports. Spreadsheet exports neutralise anything that could run as a formula.
- Encrypted connections. Everything travels over HTTPS.
What you can do
- Give logins only to people who need them, with the lowest role that works.
- Make sure everyone with a login has a mobile on file.
- Deactivate logins on a person's last day.
- Use the Pay rates field permission to limit who sees pay.
- Store exports and printed profiles securely, and delete copies you don't need.
- Never share secure links or temporary passwords publicly.
Questions about privacy or a data request? Email support.
Related articles
Last reviewed 2026-10-13.