How WorkZerk keeps your people’s paperwork safe.
The people you onboard send you some of the most private things they own: tax file numbers, bank details, licences and ID. This page explains how WorkZerk protects them, from the link they open to the record you keep.
The link you send each person
Each person gets a private link to their own portal. It is built to take paperwork in, not to hand it back out.
Files go one way
Once someone uploads a document, it cannot be downloaded again through their link. Someone who gets hold of the link later cannot pull those files back out.
Sensitive answers stay masked
A tax file number or account number shows as dots on the person’s own link. To change it they type it again in full, so a link left open on a shared computer does not show it.
The address is not kept or passed on
Link pages tell browsers and networks not to cache them, are never passed to another website when the person clicks a link out, and are kept out of search engines.
You can switch a link off
Revoke one person’s link and it stops working straight away. Close a portal and every link on it stops working.
Your files and answers
Everything is encrypted on its way to us and while it is stored.
Encrypted in transit and at rest
Every page, answer and upload travels over an encrypted connection. Files and data are stored encrypted on Microsoft Azure, and so are the backups.
A second layer for sensitive details
Mark a request sensitive, such as a TFN, bank details, a passport or a police check, and the answer is encrypted again before it is saved, with a key held apart from the database. A copy of the database alone holds only scrambled text.
Files are private
Uploaded documents are never at a public web address. They open only for a signed-in user of your account, and a sensitive file opens only for an admin.
Every upload is checked
Each file is checked for viruses before anyone can open it.
Who can see what
You decide who on your team sees the private details, and you can see every time they do.
Admins and members
Each person on your team is an Admin or a Member. Members can do the day-to-day work, but sensitive answers stay masked for them and sensitive files will not open.
Every view is logged
Each time someone views a sensitive answer or opens a sensitive file, WorkZerk records who, when and from which IP address. You can filter, print or export the log.
Two-factor sign-in
You need two-factor authentication on your account before you can ask anyone for a document.
Our support team
Our support staff sign in to your account only to fix a problem, and each visit is recorded with a reason. They never see sensitive answers, even then.
Keeping only what you need
Holding less is the simplest protection there is.
Delete sensitive details automatically
Set sensitive answers and files to be deleted 30 days, 90 days, 1 year, 5 years or 7 years after a portal closes. You get an email 7 days before anything is deleted.
Exports ask first
An account export leaves sensitive answers out unless you tick to include them and enter your password, and that download is logged too.
Why this page is not a full list
We use more safeguards than are described here. We don’t publish all of them, because a complete list is most useful to someone trying to get around it. If your business needs more detail for a security review, contact us and we’ll answer your questions directly.
Where your data is stored, how long it is kept and who we share it with are set out in our privacy policy and list of subprocessors.
Onboarding with a company that uses WorkZerk? See opening your link.
Try it on your next new starter.
30-day free trial. No credit card.