What are the Security standards of the eFOB platform?
Security of the eFOB platform
We create automatic backups to protect your data against accidental or malicious deletion, ransomware attacks and more.
We have an extensive authorization system that allows you to limit user access only to specific modules, functionalities and data. For configuration guidance, see Permissions - introduction.
We have the Trash functionality - a two-stage document deletion system enabling their restoration. We store all versions of document changes to additionally secure your archive.
We record the history of changes and readings of documents and key personal data along with the date, user and activity performed. For instructions on checking document history, see Audit.
Our information security management system meets the requirements of ISO/IEC 27001:2022, as confirmed by certification.
We constantly adapt to legal changes. We meet the requirements of the GDPR and the requirements for the IT system referred to in § 9 and § 10 section. 3 Regulation of the Ministry of Labor and Social Policy of December 10, 2018 on employee documentation.
We secure the connection when logging into the application and the entire user session with an SSL certificate ensuring confidentiality and integrity of transmitted data.
We monitor our services for service interruptions, performance degradation, and security vulnerabilities. Our administrators take immediate action when incidents are detected.
Files added to eFOB are scanned for malware. File information and status are available in document details.
eFOB uses CAPTCHA on selected public forms to help limit automated abuse.
ISO/IEC 27001:2022
The HRobots information security management system (ISMS) for IT and digitization services is certified to ISO/IEC 27001:2022.
The ISO 27001 standard details the requirements for establishing, implementing, maintaining, monitoring and improving an information security management system in an organization.
HRobots sp. z o. o. as an organization it provides
- Full protection of customer data and continuity of their processing
- Maintaining the confidentiality of protected information, integrity and availability of information
- Guarantee of an appropriate level of data security
- Minimizing the occurrence of information security threats that result from intentional or accidental activity
- Ensuring readiness to take action in security crisis situations
- Systematic analysis of threats and the use of adequate security measures
- That we have and apply procedures for securing documentation and their processing systems, including procedures for access, backup and storage;
- Ongoing control of the functioning of all organizational and technical-IT security methods, as well as periodic assessment of the effectiveness of these methods (including annual ISO27001 audit)
How do we work?
- We have continuous monitoring and backup systems for the entire platform
- With each update, we verify security and update system components
- We have implemented information and personal data security policies and procedures
- We have specific rules for the processing of personal data (GDPR)
View the certificate on the issuer's website (LL-C)
Safe use of the eFOB application
Enter your username and password only on the eFOB login page. The correct application address is https://efob.app/.
For more guidance on protecting devices, signing in and managing permissions, see Safety of use of eFOB.