Security
The parts a buyer asks about in the demo.
Permission checks run on the server and start closed. Every record change is written to history, and deletes are soft.
-
Permissions are enforced on the server
A user without financial access does not receive the numbers. They are not hidden in the page or removed by the browser, they are never sent. Every permission check starts closed and opens on a positive match, so an unrecognised value denies rather than grants.
-
Five roles, and the data scope is fixed to the role
A role sets which records a person can reach, and that is separate from the permission grid that decides which fields they see. Custom roles inherit a base scope that cannot be edited afterwards, so a permission change can never quietly widen what someone can reach.
-
Every change is recorded
Field-level history on records, a separate transition history for pipeline movement, and an audit log for administrative action. Deletes are soft, and there is a recycle bin.
-
Imports can be rolled back
A bad import is undone as one operation rather than cleaned up by hand.
| Capability | Recruiter | Sr recruiter | BD | Sr BD | Admin |
|---|---|---|---|---|---|
| Pay rates | Yes | Yes | Yes | Yes | Yes |
| Bill rates and margin | No | Yes | Yes | Yes | Yes |
| Commission | No | No | Yes | Yes | Yes |
| Banking details | No | No | No | No | Yes |
| Placements | No | Yes | Own clients | Yes | Yes |
| Client portfolio | No | No | Own | All | All |
| Revenue report | No | No | No | No | Yes |
| Settings and audit log | No | No | No | No | Yes |
Shared shortlists
What a sent hotlist really grants.
-
Expiry
A shared hotlist carries an expiry date, set when the link is composed, with a default of 30 days and a maximum of 90.
-
Revocation
Access can be withdrawn at any time. New requests stop immediately; a session already open ends within about an hour.
-
What revocation cannot undo
Anything the recipient already downloaded is theirs. A sent link is a real grant, so treat it like one. We would rather say this plainly than let you find out later.
-
Passcodes
A hotlist can require a passcode in addition to the link.
Need to go deeper before you can sign off?
Send us the questionnaire. We will answer it directly, including the questions where the honest answer is not yet.