HomeSecurity
HR data needs more than a permissions table – it needs traceable, multi-layer protection.
The PDVS security model covers authentication, permission management, object-level access, audit, sign-in monitoring, IP control and encryption of sensitive employee data. It helps control who can see specific information and what they did in the system.
Key functions and business benefits
Who can see specific information – and what they did in the system.
- 012FAUsers can turn on TOTP (an authenticator app) or one-time e-mail codes; there is no mandatory-2FA switch yet.
- 02Sign-in protectionTemporary lockout after failed attempts; password strength requirements and a check against known breaches.
- 03Roles and object permissionsAccess is managed not only per page but per specific employee, document or process.
- 04Protected filesSensitive uploaded files are served only to authorised users according to the set access rules.
- 05Encryption of sensitive dataPersonal ID number, address, salary, IBAN and integration credentials are stored encrypted.
- 06Audit logSign-ins and key actions (create, edit, delete, approve, reject, import, export) are recorded with the user, time, IP address and browser; where provided – also with the before/after change.
- 07Sign-in logSuccessful and failed sign-ins are recorded with browser, OS, device and IP metadata.
- 08IP control and rate limitingIPs can be blocked, unauthenticated request rates limited and attempts monitored.
- 09CSP and XSS protectionA content security policy (CSP) with per-request nonces and HTML sanitisation reduce the risk of client-side attacks; CSP blocking mode is switched on at implementation after an observation period.
The model
Five layers – from sign-in to monitoring.
- 01Sign-inOptional 2FA, lock-out after failed attempts, password policy
- 02PermissionsRoles, object-level access, least privilege
- 03DataEncryption of sensitive fields, protected files
- 04AuditAction history with user, time and IP
- 05MonitoringSign-in log, IP control, rate limiting
| Time | User | Status | IP | Location | Browser / OS | Duration |
|---|---|---|---|---|---|---|
| 2026-09-04 14:22:31 | Rasa Kazlauskienė r.kazlauskiene | Successful | 10.0.4.17 | Vilnius, LT | Edge / Windows | 72 min. |
| 2026-09-04 13:58:04 | Tomas Petraitis t.petraitis | Successful | 10.0.4.31 | Kaunas, LT | Chrome / macOS | 47 min. |
| 2026-09-04 12:41:19 | a.novikov unknown user | FailedLocked | 185.42.19.7 | Ryga, LV | curl / — | — |
| 2026-09-04 11:15:52 | Gintarė Urbonaitė g.urbonaite | Failed | 10.0.4.44 | Vilnius, LT | Safari / iOS | — |
| 2026-09-04 08:03:27 | Mantas Jankauskas m.jankauskas | Successful | 10.0.9.5 | Klaipėda, LT | Edge / Windows | 5 val. |
The point
We start from the business meaning: protection of sensitive data, least privilege, traceability and the ability to investigate an incident. Technical security questions are discussed with IT and compliance teams individually.
Related solutions
DMS / QMS
Codes, versions, revisions, review, annotations, register, acknowledgement; documents for several companies.
Read more → INTIntegrations
Microsoft 365, Vikarina, BioStar 2, Worksober, OpenAI / Azure OpenAI, SMTP.
Read more → PDVSAbout PDVS
The product idea, implementation principles and pricing by scope.
Read more →