Security & compliance built in
Trela runs the payroll, attendance and compliance data of deployed workforces, so protecting it is core to the product. This page is a general overview of the safeguards, certifications and practices we rely on to keep your data secure and your operations audit-ready.
AES-256 encryption
Data encrypted in transit and at rest with industry-standard ciphers.
SOC 2 Type II
Controls independently examined against the SOC 2 trust criteria.
99.95% uptime
Resilient, multi-zone infrastructure with continuous monitoring.
Full audit trails
Every sensitive action logged with actor, time and context.
Data encryption
Data is encrypted in transit using TLS and at rest using AES-256. Encryption keys are managed through a dedicated key-management service with strict access controls, and sensitive fields receive additional protection where appropriate.
Infrastructure & uptime
Trela is hosted on resilient cloud infrastructure across multiple availability zones, targeting 99.95% uptime with automated failover, backups and continuous health monitoring. We test recovery procedures regularly so the platform stays available when your teams are on shift.
Access control & audit
Access to systems and data follows least-privilege and role-based principles, with authentication controls for staff. Sensitive actions across the platform are captured in tamper-evident audit trails, giving administrators a clear record of who did what and when.
Compliance
Trela is designed to support the compliance obligations of Indian workforce operations, including PSARA records for security agencies, EPF and ESI contributions, and GST-ready billing. Our controls are examined against the SOC 2 Type II trust criteria to give customers independent assurance.
These references are provided as a general summary; the specific compliance features available to a customer depend on their configuration and plan.
Responsible disclosure
We welcome reports from security researchers. If you believe you have found a vulnerability, please contact us so we can investigate and remediate promptly. We ask that researchers act in good faith, avoid accessing or modifying data that is not their own, and give us a reasonable opportunity to respond before any public disclosure.
Ready to run your workforce on Trela?
Book a 30-minute demo and see your sites, shifts and compliance mapped to Trela.