Each business kept apart
- Every business has its own separate database and its own login. Your data never sits in a shared pool with other businesses.
- A second safety layer inside the database also keeps each business's records apart.
- Each person gets a role, and access is checked on every request, down to the branch and company. A role can never give more than the person who sets it has.
Records that cannot be quietly changed
- Stock movements, accounting entries and the history of who did what cannot be changed or deleted, even by Ziira's own software.
- The history is chained together so that tampering would show.
- Who made a record and who approved it are kept apart, and you can require that they are different people.
- Every file download of your data is written to the history.
Signing in
- Passwords are stored in a scrambled form and checked against lists of common passwords.
- Wrong guesses are counted, and too many lock the sign-in for a while.
- Two-step sign-in with an authenticator app can be made compulsory by the business.
- A sign-in lasts 15 minutes at a time, and signing out of a lost phone works at once.
Passwords and keys for other services
The keys and passwords you give Ziira for other services are stored encrypted and shown only once. Secrets and personal numbers are blanked out of technical logs.
Ziira staff
Ziira staff are not users of any business and see nothing without your agreement. You can give support staff time-limited access (from 1 hour to 7 days), take it back at any moment, and read a log of everything they did. Staff must use two-step sign-in.
Privacy tools
Your business owns its data, and Ziira handles it on your behalf. There are tools to find, export, correct and anonymise a person's data, and to apply the retention periods you set. Records that must stay unchanged, such as the history of actions, keep a reference but not the erased details. Which law applies is for you and your advisers to decide. Backups still contain erased data until they expire.
The optional AI helper
Off until an Owner agrees. Personal details are removed before anything is sent, it can only read what the person asking is allowed to see, every figure it uses must trace back to your records, and every use is logged without the text.