Roles and privacy
| Role | Can |
|---|---|
| Owner | Everything, including making other people owners. |
| Admin | Manage members, settings, SSO and invites, including admin invites. |
| HR | Manage people, sites, hours, policies and invites. Sees salaries and all attendance. |
| Manager | Sees and reviews attendance for their direct reports. |
| Employee | Checks in and out. Sees their own attendance and salary, and the company directory. |
- Directory: everyone in a company sees the directory (name, title, department, site). Salary, national ID and birth year are only visible to HR, the person themselves and their direct manager.
- Attendance records are append-only. Reviewers can only change the review status.
- Isolation: data of different companies is fully isolated by row-level security in the database.