Security at RosterElf
We take the security of our platform and our customers' data seriously. Find our security policies and programs below.
Vulnerability Disclosure Program
How to responsibly report security vulnerabilities in RosterElf, including scope, safe harbour, and contact details.
Security knowledge base
Help articles covering multi-factor authentication, Google Authenticator setup, infrastructure security, and more.
Privacy policy
How we collect, use, store, and protect your personal information in compliance with Australian Privacy Principles.
A password is not the only thing standing in the way
Turn it on for the accounts that matter most
Multi-factor login asks for a code as well as a password, so a leaked or reused password is not on its own enough to reach your rosters, staff records and pay data.
It is worth being specific about who this protects. Managers and admins can see pay rates, contact details and employment records for everyone on the roster — the accounts most worth taking, and the ones where a second factor earns its friction.
Related pages
Other resources you might find helpful
Legal
Terms, privacy policy, acceptable use, and all legal documents governing your use of RosterElf.
Contact us
Get in touch with the RosterElf team for support, sales, or general enquiries.
Features
Explore the full suite of rostering, time and attendance, and payroll features.
Frequently asked questions
- RosterElf uses industry-standard encryption for data in transit (TLS) and at rest. Our infrastructure is hosted on secure cloud providers with regular security assessments. See our infrastructure and security article for more details.
- Yes. When MFA is enabled, RosterElf emails a verification code and sends the same code as a push notification at the same time, with SMS available as a backup, or you can use Google Authenticator instead. We strongly recommend enabling MFA on all accounts. Visit our MFA setup guide to get started.
- You can report security vulnerabilities through our Vulnerability Disclosure Program. Please review the scope and terms before submitting a report to security@rosterelf.com.
- RosterElf does not store credit card data directly. Payments are processed by PCI-DSS compliant payment providers. See our credit card security article for full details.