Security & compliance built in
Trela holds the attendance, payroll and compliance records of deployed workforces, so protecting them is core to the product. This page describes the safeguards built into the platform.
Agency isolation
Every request is scoped to your agency on the server, so one customer’s records never reach another.
Role-based access
Admins, operations, finance, supervisors, guards and client contacts each reach only what their role allows.
Hashed credentials
Passwords, PINs and session tokens are stored only as one-way hashes, never in plain text.
Audited platform actions
Actions Trela staff take on customer accounts are recorded with who did it and when.
Access control
Access follows least-privilege, role-based rules, and the server checks them on every request, screens in the apps only reflect what the server allows. An agency’s clients see only their own sites, invoices and incidents, and a guard’s phone sees only that guard’s own records.
Accounts & credentials
Passwords, field-app PINs and session tokens are stored only as one-way hashes. Invitation and password-reset links expire and can be used once.
Verified attendance
A GPS check-in is compared with the site’s location, and a QR check-in needs the code printed at the site, which never leaves the agency’s console. Each attendance record keeps how it was verified.
Compliance records
Trela helps Indian workforce agencies keep their compliance records in one place, including PSARA licences, each guard’s verification documents and GST-ready client invoices.
Responsible disclosure
We welcome reports from security researchers. If you believe you have found a vulnerability, please contact us so we can investigate and remediate promptly. We ask that researchers act in good faith, avoid accessing or modifying data that is not their own, and give us a reasonable opportunity to respond before any public disclosure.
Ready to run your agency on Trela?
Book a 30 minute demo. We will show you Trela set up with your own sites, your shifts and your papers.