Security

What is live, and what is the company's registration.

A control appears here as live only after it is enforceable in the running product. The company registration below belongs to CYBOT-X Technologies Private Limited.

Company registration

ISO/IEC27001:2022

Powered by

CYBOT-X Technologies Private Limited

ISO/IEC 27001:2022 registration UCS-082026-I-106, issued by Universal Certification Services. Valid 20 Aug 2026 to 19 Aug 2029.

NexHR does not claim SOC 2. ISO/IEC 27001:2022 registration UCS-082026-I-106 is held by CYBOT-X Technologies Private Limited for its information security management system, covering IT and software services. It is not an assessment of this early-access application on its own. We do not claim that pay data is sealed so the application cannot read it. Payroll has to process the numbers.

Questions go to support@cybot-x.com.

Implemented controls

Implemented
CTL-02Implemented

Administrator authenticator

The subscription desk requires a password and a 6-digit authenticator code. Recovery codes are shown once.

CTL-07Implemented

Subscription audit log

Sign-in, failed sign-in, and billing changes are appended for administrators, with a filter and CSV export.

Planned controls

Planned
CTL-01Planned

Role-based access

Module and action scope, including who can see pay.

CTL-03Planned

Audit log

A record of changes to pay, tax choices, and employee data.

CTL-04Planned

Independent security test

A third-party review of the public application.

CTL-05Planned

Customer-managed keys

Enterprise option to supply your own encryption keys.

CTL-06Planned

Export and deletion

A path for a person to export or delete their data.

AI still waits for a person

A suggestion can draft a match, a roster, or a note. Pay, tax, and the employee record change only after someone chooses Review and confirm.