AttuneOps Trust Center
How we protect workforce data, what we are certified against, and the documents your security team will ask for.
Security controls
The controls below are summarized for review; full policies are available on request under NDA.
Encryption
TLS 1.2+ in transit, AES-256 at rest, keys managed in a hardware-backed KMS.
Access control
Role-based access, SSO and SCIM provisioning, least-privilege by default.
Audit logging
Every schedule, punch, pay line, and credential change attributed and retained.
Vulnerability management
Continuous scanning, third-party penetration tests, and a disclosure program.
Data residency
Private-cloud and single-tenant options; data stays in your chosen region.
Incident response
Documented runbooks, customer notification commitments, and post-incident reviews.
Monitoring
24/7 infrastructure and application monitoring with alerting.
Vendor review
Subprocessors reviewed annually and listed below.
Request documentation
Documents are shared with named reviewers under NDA. Most requests are fulfilled within two business days.
Subprocessors
Third parties that process customer data on our behalf.
The workforce operations platform for healthcare
Designed for the moments between a schedule and a paycheck.