Company data isolation
Every record in GanpuraWork belongs to exactly one company. The server adds the company to every database query and refuses queries without one, so a company can never read or change another company's data, even through a mistake in a single screen.
Access control
Access is checked on the server for every request:
- Roles for owner, HR manager, team lead and employee, with a permission table each company controls.
- Passwords stored as salted hashes; email code sign in for employees.
- Rate limits on sign in and code requests.
- Separate, two-step sign in for GanpuraWork staff.
Data in transit and storage
All traffic uses HTTPS. Files such as logos, documents and photos are stored with access controls, and database backups are protected.
Audit and monitoring
Important actions such as permission changes, document issue and revocation, and support access are logged with the user and time. Service health is monitored continuously.
Document authenticity
Every document generated through GanpuraWork has a unique number and a QR code. Anyone can scan it to confirm the document was issued by the company and has not been revoked.
Reporting a security issue
If you find a security problem, please report it to us privately through the contact page instead of publishing it. We will acknowledge the report and keep you informed while we fix it.
Contact
Questions about this page can be sent to support@ganpura.in. If you are an employee of a company that uses GanpuraWork, please contact your company's HR team first, because they control your records.