Security
How LynkCrew protects your organization's employee data.
Our Commitment
LynkCrew is purpose-built for HR teams that hold regulated employee data and require it to be accurate, available, and private. Because the platform stores sensitive personal information — home addresses, dates of birth, phone numbers, compensation, and identifiers such as the last four digits of a government ID — security is a core design requirement, reviewed continuously as the platform evolves. This page describes the controls and practices we maintain.
Infrastructure Security
Our platform runs on enterprise-grade cloud infrastructure with established security certifications and global availability. We build on major cloud providers that maintain SOC 2 compliance, physical security standards, and incident response capabilities. We do not operate our own data centers — we rely on providers whose security posture is independently audited.
Data Encryption
All data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted at the storage layer by our infrastructure providers. In addition, the most sensitive employee fields — such as the last four digits of a government ID, home address, date of birth, and phone number — are encrypted at the field level before they are written, so they are protected even beyond the storage-layer encryption. Files and documents uploaded to the platform are stored with encryption at rest and are only accessible via time-limited, authenticated download links — direct external access to stored files is not possible.
Authentication & Access
User authentication is handled by a dedicated identity platform that supports multi-factor authentication (MFA), secure session management, and credential protection. We do not store or handle raw passwords.
Within the platform, access is controlled by role-based permissions tailored to HR data. An HR administrator can manage the full employee record; a manager sees only the people and fields relevant to their team; and an employee has self-service access to their own record. Sensitive fields are gated to the roles that genuinely need them. Organization data is isolated — users from one organization cannot access another organization's employee data under any circumstances.
Internal Access Controls & Audit Logging
Access to production systems is restricted to authorized personnel only. We follow the principle of least privilege — no broad standing access to customer data is granted. Internal access is reviewed periodically. Reads of sensitive employee personal information and administrative actions within the platform are logged, so there is an auditable record of who accessed which regulated fields and when.
Monitoring & Incident Response
Our infrastructure is monitored continuously for anomalies, errors, and availability. We maintain alerting for unexpected access patterns and system health degradation. In the event of a confirmed security incident affecting customer data, we will notify affected organizations promptly and provide clear information on scope, impact, and remediation steps.
Data Backups
Customer data is backed up automatically by our infrastructure providers. Backups are retained and encrypted. We do not guarantee specific recovery point or recovery time objectives at this stage, but data durability is a core infrastructure requirement.
Rate Limiting & Abuse Prevention
The platform enforces rate limits on authentication attempts, API requests, and sensitive operations to protect against brute-force and abuse. File uploads are validated for type and size before being accepted by the platform.
Vulnerability Disclosure
If you discover a potential security issue in LynkCrew, please report it responsibly to support@lynkpilot.com. We will acknowledge your report within 2 business days and work to resolve confirmed issues promptly. We ask that you do not publicly disclose issues before we have had a reasonable opportunity to address them. We do not currently offer a formal bug bounty program but we take all reports seriously.
Questions
For security questions or concerns not covered here, contact support@lynkpilot.com.