How your team's data is keptข้อมูลของทีมคุณ เก็บอย่างไร
Where one clock-in goes, who can see it, and how it is backed up.
One clock-in, from the phone to the backup
Clock in
Pony checks the GPS position against the branch radius and records it with the time.
- Works without AI
- Clocking in, leave, shifts and payroll work whether or not AI is available.
- Counted per request
- Pony Magic is counted per request on each plan, so you can see what you use.
Encrypted
GPS, pay and ID numbers are encrypted with AES-256-GCM before they're stored.
- Identity
- National ID, tax ID, social security number and passport number.
- Pay
- Bank account, salary and hourly rate.
- Location
- GPS positions from clocking in.
Your company only
Every record belongs to one company; no one else's account can read it.
- Each company kept apart
- Every record belongs to one company; people only ever see their own organisation's data.
- Access by role
- Staff, supervisors and owners each see only what their role allows.
- Signing in
- Email and password, or Google, Microsoft or LINE. Changing a password signs out every other device.
- Two-step sign-in
- Email sign-in can add a 6-digit code from an authenticator app, with one-time recovery codes.
- Activity log
- Owners and admins can see who changed what and download it as a CSV for an audit.
- When our team helps you
- Only Pevo platform staff can open a customer's workspace to help, and every time they do it is logged.
Kept in Singapore
Stored in Singapore, restorable to any second of the last 7 days, and backed up every night to a separate provider.
- Where it lives
- The database runs on managed PostgreSQL in Singapore, next to the app servers.
- Any second, last 7 days
- The database can be restored to any point in the last 7 days.
- Every night
- The whole database is backed up at 02:00 Bangkok time, encrypted, and stored with a separate provider.
- Kept 35 days
- Daily backups are kept for 35 days.
- Restored every week
- Every Monday the newest backup is restored into a separate database and checked. The check fails if the newest backup is more than 48 hours old.
Questions about security? Email us before you sign anything. We reply within one business day