Security and data protection

Passports, QIDs and bank details deserve careful handling. These are the controls built into Rukn.

Role-based access
Eight staff roles, from CEO and HR to site supervisor and read-only auditor. Every action is checked on the server against the user's role.
Scoped by site and camp
Site supervisors see only their own sites, and camp managers only their own camps.
Encrypted sensitive fields
QID and passport numbers, IBANs and bank names, worker PINs and uploaded medical certificates and photos are encrypted with AES-256-GCM.
Audit log
Pay rule changes and other key actions are recorded: who did what, and when.
Strong sign-in
Single sign-on and two-factor authentication for staff, IP allowlisting, rate-limited logins, and worker PINs that lock after repeated wrong attempts.
Encrypted off-site backups
Automatic encrypted backups stored off-site with a retention policy, tested restores and data archival.
Your data, your control
Hosting is agreed with you before any real data goes in, and your data can be exported at any time.

See Rukn with your own workforce

A 15-minute walkthrough, then a free 60-day pilot with your data imported for you.