Security and your data

Protect your sign-in

• Two-step sign-in: under SettingsSecurity, admins can require a code by email in addition to the password for the dashboard. Each person can also turn it on for themselves under SettingsMy account.
• Where you’re signed in: SettingsMy account lists browsers and phones signed in to your account with their approximate location. Don’t recognise one? Sign it out and change your password.
• Security alerts: Stafrix flags things that look unusual, such as one phone used for two employees, an account open on two devices at once, a new phone to approve, or a sign-in from another country. Mark each one reviewed once you’ve looked, and turn on Email security alerts to get them by email too.

Activity log

SettingsActivity log shows who changed what and when: punches, salaries, leave, rules and settings. Entries are kept for one year.

Deleting your workspace

1. Owner only

   Open SettingsCompany details and choose Delete workspace.
2. Confirm

   Type the workspace name and your password (owners who sign in with Google get a code by email).
3. Seven days to change your mind

   The workspace is deleted after 7 days. Until then the owner can sign in and cancel; other users and employees are locked out. Admins are emailed.

Employees who want their own data removed can follow Delete your account. How we protect your data is on the Security page.