Security at Certify

Certify uses administrative, technical, and organizational safeguards designed for an HR and leave-management platform. Security measures include authenticated access, role-based authorization, encryption in transit, protected production configuration, restrictive HTTP headers, and controls around connected services.

The security program also addresses application monitoring, dependency management, data minimization, incident handling, and the responsibilities shared with customer organizations. Certify does not make unsupported certification claims; contractual, regulatory, and assurance requirements should be confirmed in writing for each customer deployment.

What Certify provides

• Authenticated and role-based access
• Encryption and security headers
• Production configuration controls
• Clear shared-responsibility model