Implemented and tested
Organisation-scoped access, authenticated document downloads, role-based permissions, file checksums, immutable approved reports and audit records.
Security and data handling
Controls for operational records and evidence documents.
These are product controls represented in the application and production-readiness documentation. Formal compliance certifications are not claimed.
Pilot rollout checklist
Before live operational records are accepted, production mailboxes, SMTP, remote encrypted backup checks, Redis-backed shared cache, HTTPS/proxy settings and support-access logging must be confirmed.
Data handling
Uploaded evidence documents are private, organisation-scoped records served through authenticated download views. During the pilot, access to customer information is limited to the DehireDesk founder and only where reasonably necessary for setup, customer-requested support, technical or security investigation, backup recovery or service restoration.
Export and deletion
Pilot customers can request manual export of container records, evidence metadata and generated evidence-pack files before any continuation decision. If the pilot does not continue, the customer may request export and deletion from the active system within 14 days. Residual copies may remain in encrypted backups until those backups expire and will only be used for disaster recovery.
AI and review boundary
DehireDesk will not access customer documents for product development, marketing or unrelated purposes without the customer's permission. DehireDesk does not provide legal advice or decide payment liability.
Uploads
DehireDesk accepts PDF, PNG and JPEG files up to 10 MB each. Customers should avoid uploading identity documents, payment details, health information or other information not necessary for the container workflow. Uploads are restricted by file type and size. Automated malware scanning is not currently included in the pilot and may be introduced before broader rollout.
Hosting and storage
Hosted in Sydney, Australia using DigitalOcean VPS local storage for demo environment.
Backups and recovery
Encrypted rolling backups are retained for up to 30 days and used only for disaster recovery.
Incident contact
Security questions and incident reports go to security@dehiredesk.com.
Pilot readiness boundary
The pilot should stay private until the domain mailboxes, business identity, GST wording, Stripe payment link, backup monitoring and support process are confirmed.