Security & GDPR
Your people’s data, handled properly
HR data is personal. Here’s exactly how Nav360 HR keeps it safe and compliant with UK GDPR.
UK/EU hosting
Your data is stored in the UK/EU. Backups are encrypted and tested every month.
Encryption everywhere
TLS 1.2+ in transit; encrypted at rest; NI numbers, bank and health details encrypted again at field level.
Access you control
Roles by site and team, MFA for admins, SSO on Enterprise, and an audit log of every change.
Location only at the tap
Clokd checks location once when someone clocks in. Never tracked during a shift or at home.
Biometrics are optional
Face match is opt-in, matched on the kiosk, and PIN always works instead.
AI with guardrails
Nav AI sees only what the user can see, cites its sources and never makes decisions about people. Your data never trains AI models.
For your DPO
- Our role
- Processor (you are the controller)
- Data processing agreement
- Included, signed in-app
- Sub-processors
- Published list, 30 days’ notice of changes
- Data subject requests
- Export or delete one person’s data in minutes
- Breach notification
- Without undue delay
- Retention
- Configurable per record type, auto-deleted
Certifications & reviews
- Cyber Essentials PlusIn progress
- Independent penetration testBefore launch and yearly
- ISO 27001On our roadmap
Need our security pack or the DPA? Email hello@360navtech.com.