SparkoYour Data Security is
Our Priority
HR data is among the most sensitive in any organization. Sparko is built with security and privacy at its core — not as an afterthought.
Data Protection
Encryption at Rest
All data is encrypted using AES-256. Sensitive fields like salary and personal information use additional field-level encryption via AWS KMS.
Encryption in Transit
All connections use TLS 1.2+ encryption. HTTPS and HSTS enforced on all endpoints.
Secure Infrastructure
Hosted on AWS with multi-availability zone redundancy. Your data is always accessible and protected by AWS's enterprise-grade security.
Automated Backups
Continuous automated backups with point-in-time recovery. Multi-AZ replication for high availability. Backup copies retained per our data retention policy.
Access Control
Role-Based Permissions
Granular permission controls let you define exactly who can see and do what. Admins, managers, and employees each see only what they need.
- Custom role creation
- Field-level permissions
- Action-level restrictions
- Department-based access
Authentication Security
SSO, MFA, and passkeys included starting on the Core plan — never gated behind a higher tier.
- Multi-Factor Authentication (TOTP)
- Passkeys (WebAuthn)
- SSO with SAML 2.0, Okta & Entra (all plans)
- Password policy enforcement
- Session timeout controls
Audit Logging
Visibility into authentication events and data changes for security monitoring.
- Immutable audit trails
- Authentication activity tracking
- Before/after change tracking
- Login history
AI & Data Privacy
We never use your data to train any AI model — not for Sparko, not for anyone. Your data is only used to serve you, in real time. It is never stored for training purposes.
Have Security Questions?
We're happy to discuss your specific requirements and walk through our security practices.