data privacy and security

We believe privacy is a fundamental human right

Here at Grove HR, we’re committed to put data security and privacy in utmost priority. That's why our product development approaches include advanced privacy technologies to protect your data.

Grove Data Security and Privacy

How do we keep your data safe and secured?

World-class storage services

Your data is stored on the Google cloud service, which is automatically encrypted at rest and distributed for optimal availability and reliability. This helps ensure 24/7 accessibility for our customers and guard against service interruptions.

Trusted third-party penetration testing

We regularly work with third-party security penetration experts to conduct VA/PT including product facing, development process, firewalls, and security procedures. We also enable the Web Security Scanner to promptly inspect potential vulnerabilities. Therefore effective measures are taken in time.

Reliable data encryption

Customer’s sensitive data such as salary, payroll, etc is encrypted by AES-256 algorithm before saving to the database. Moreover, communications over the Internet between the customer's end side and Grove HR’s servers are encrypted in transit by the latest TLS/SSL and protocols. The network and infrastructure have multiple layers of protection to defend our customers against data breach.

Inheritance from KMS Technology infrastructure

Our office is located within one of KMS offices. We inherit from KMS infrastructure and security policy including ISO 27001 certificate (ISMS) which affirms data protection of Grove and our customers as well. We also employ rigorous measures and countermeasures on Google Cloud to ensure our infrastructure remains safe.

Operational control within Grove HR

All Grove HR’s employees are frequently required to go through standard data security and privacy training. We implement a strict authorization matrix within Grove HR to restrict unauthorized access to sensitive data. Plus, in-depth risk assessment and authorization review are conducted on a regular basis.

Continuous monitoring and response

We maintain continuous supervision and detection on the security status of our customer’s data with a dedicated team and prominent applications that work 24/7. In case of issues, we will get alerted and respond to protect your data immediately.

Global standard of compliance

Our platform is built on state-of-the-art Google Cloud infrastructure located in Singapore. By leveraging the secure-by-design foundation, built-in protection, and global network, we guarantee to deliver a quick, consistent and secured experience for all our customers.

Grove HR - ISO 277001:2013 certificateGrove HR - MTCS Singapore Tier 3 certificateGrove HR - GCP Certificate