Security at TalonHR

Infrastructure Security

TalonHR is built on Cloudflare Workers, providing:

• Global edge network with DDoS protection
• TLS encryption for all connections
• Automatic SSL certificate management

Data Protection

We implement multiple layers of data protection:

• Encryption in transit: All connections use HTTPS (TLS 1.2 or later)
• Encryption at rest: Database and storage encryption
• Access controls: Role-based access within each customer account

Authentication

TalonHR supports:

• Email/password authentication with secure password hashing
• Sign in with Google, Microsoft, or Apple
• Session management with secure, httpOnly cookies

Data Isolation

Each customer's data is logically isolated. Multi-tenant architecture ensures that one customer cannot access another customer's data.

Incident Response

We will notify affected customers promptly in the event of a security incident that may impact their data.

Responsible Disclosure

If you discover a security vulnerability, please report it responsibly by emailing hello@skyhawklabs.dev. We appreciate your help in keeping TalonHR secure.

Questions?

For security-related questions or to request additional information, please contact us.

Last updated: Draft