Last updated: 10 October 2026
Security Overview
Product safeguards and how to report concerns or request customer due diligence materials.
These materials are under review. Subscription and processing obligations are established by the agreement signed with your organization. Contact us for the applicable agreement.
Product safeguards
HutchHR implements authenticated access, role and relationship-based permissions, workspace-scoped checks, password hashing and audit records for selected actions. Employee documents and leave attachments use access-controlled storage paths. Payroll bank account numbers are encrypted by the application before storage.
Customers manage authorized users and should review access when staff roles change. Private notes, review release settings and other visibility controls should be considered before entering or sharing sensitive information.
Assurance and customer enquiries
This overview does not claim a security certification, comprehensive audit coverage, a particular recovery time or guaranteed availability. Contractual security measures and processing schedules should be obtained during due diligence. No online system can guarantee that an incident will never occur.
Report a security concern
Email the contact below with the subject Security report, affected feature, approximate time and a description. Do not include passwords, complete bank details or unnecessary employee information. Request a suitable channel before sending sensitive evidence. Do not access other people’s data or conduct disruptive testing.
Incident notifications are governed by the applicable Data Processing Addendum and law. Reports will be assessed; this page does not promise a fixed response time or a bug bounty.
Questions or privacy requests? Contact our business inbox: info@hutchstack.com. Please do not send sensitive employee records in your initial email.