Enterprise-Grade HR DataSecurity & Compliance
Employee data carries more risk than most software categories: salaries, home addresses, performance reviews, sometimes health information tied to leave requests. A privacy policy nobody reads isn't protection. Here's exactly what is.
PIPEDA
Canada's federal law governing how private-sector organizations collect, use, and disclose personal information. Zentra's data handling is built around PIPEDA's requirements directly, rather than adjusted after the fact to fit them.
DPDPA 2023
India's Digital Personal Data Protection framework covers consent, breach reporting, and grievance redressal. Any organization with employees or operations connected to India sits under this alongside the Canadian frameworks below.
Bill C-27 / CPPA
Canada's Consumer Privacy Protection Act, still moving through the legislative process, is expected to raise the bar beyond what PIPEDA currently requires. Zentra is built toward that direction now, so there's no scramble to rebuild once it takes effect.
Provincial Laws
Alberta PIPA, BC PIPA, and Quebec's Law 25 each layer their own provincial requirements on top of the federal baseline, and Zentra's approach accounts for all three, not just PIPEDA alone.
AES-256-GCM — Encryption at rest
Every record on the platform — employee profiles, payroll figures, uploaded documents — is encrypted using AES-256-GCM, the same standard used across regulated industries handling far more sensitive data than most HR platforms touch.
RBAC — Role-based access
What a person can see is governed by their role, not default visibility. An employee's view stops at their own payslip. A manager's stops at their team. Payroll-level access exists only for the roles that genuinely need it.
Immutable — Audit trail
Every access, every change, every action — logged, timestamped, and impossible to alter after the fact. If something ever needs investigating, there's an actual record to investigate, not a gap.
Tenant-scoped — Data isolation
No organization on the platform can see another's data, full stop. It's the same principle behind Copilot's “no cross-tenant leaks” promise — see Zentra Copilot for how it plays out in the chat specifically.
See the full picture before you commit.
Every control above applies from your very first employee record — nothing here is a paid upgrade.