Wrkbase security is not a compliance badge. It is six real guarantees, each shown as what actually happens, not asserted in a paragraph.
Roles and permissions are resolved from real records. Whether someone can edit their own task versus anyone's is checked on the server, every time, not assumed from what buttons happen to render.
Every action the agent takes re-runs the full permission check right before it happens, exactly as if a human had submitted it manually, so a permission revoked mid-plan actually blocks it.
Every action, human or agent, is written to an audit log that database-level triggers reject any UPDATE or DELETE against, after the fact, not just by policy.
From your browser to our servers and back, including the live updates that stream in as your team works: HTTPS, authenticated realtime connections, and CSRF protection on every request that changes data.
Task moves, attendance changes, mentions, and leave approvals fan out live over one authenticated socket connection, so the page in front of a visitor is never stale by a page reload.
Every organization's data is scoped to that organization at the query layer. Nothing is shared with, or visible to, any other team on the platform.
The controls an owner checks before inviting the team, all included on Free.
Authenticator-app codes on any account, with 10 single-use recovery codes.
Five wrong passwords or codes lock the account for 15 minutes.
Every signed-in device listed, revoke one or log out everywhere. Password resets end every session.
Google sign-in for existing accounts, plus bot protection on sign-in and sign-up.
Boss, HR, Manager, and Employee by default. Create your own roles and choose exactly what each can see and do.
Nobody can edit, suspend, or grant a role more senior than their own, and the AI agent is held to the same rule.
Every role sees exactly what's relevant to it, automatically, not just hidden behind a setting.
| Capability | Boss | HR | Manager | Employee |
|---|---|---|---|---|
Task & attendance visibility | Whole company | Whole company | Own team | Own work only |
Leave approvals | ||||
Salary & payroll | Full access | Full access | Own payslip only | Own payslip only |
AI agent | ||||
Chat moderation (delete any message) | ||||
Roles, permissions & org settings |
Sees every team, holds every approval, and is the only role that manages other roles and company settings by default.
Not even Boss gets the audit log by default. That stays a deliberate, manually-granted step, never a blanket admin power.
We're not going to list a certification we don't hold just because it's expected on a page like this. If you need a specific compliance framework or a security questionnaire filled out, ask. We'll tell you plainly whether we meet it today.
Free for teams up to 5, no credit card required.