On your server
Keelsum runs on hosting your company pays for and controls, in Nigeria or wherever you choose. Its database and files are there, and nowhere else.
- Home
- Self-hosting
- Security and data protection
Trust
Your data stays with you. We do not keep a copy.
Keelsum is installed on a server your company controls. We do not host it, so your staff records, payroll and books are never on our servers. Here is exactly who can see what, and how it is protected.
Where your data lives
Not in our cloud
We do not run servers for customers. There is no central Keelsum database holding many companies' staff records, so there is none to be breached.
Yours if you stop paying
If you end the yearly plan, Keelsum keeps working and your data stays where it is. Nothing is switched off and nothing has to be exported back from us.
When we can see your data, and when we cannot
- Normally, we cannot. Once Keelsum is installed, we have no way into your server unless you give us one.
- Installation, updates and support: you give us access when it is needed, for example a server login or a support account in Keelsum, and you can remove it afterwards.
- We work on your server, not on copies. We do not download your database. If a problem can only be reproduced with your data, we ask first, and use as little of it as we can.
- A written agreement. Where we have access to personal data on your behalf, we sign a data processing agreement with you, as the Nigeria Data Protection Act expects.
In the product
Security built into Keelsum
- Roles and permissions: each person sees only what their role allows. Staff see their own records only.
- HR kept apart from the books: running payroll and changing the ledger are separate roles.
- Audit trail: changes to records are logged with who made them and when.
- Two-step sign-in and passkeys, including fingerprint and face sign-in on phones.
- New-device alerts: an email when an account signs in from a phone or browser it has not used before.
- Limits on repeated attempts at signing in and other sensitive actions.
- Passwords stored as one-way hashes, never in readable form.
- HTTPS required for clock-in by location, the phone app and calls.
Nigeria Data Protection Act 2023
Tools for your obligations
Your company is the data controller for its staff data. Keelsum gives HR the tools to meet the Act day to day.
Requests from staff
Requests to see, correct or erase personal data are logged, tracked against their deadline, and answered from one place.
Consent records
What each person agreed to, and when, kept on their record.
Retention and erasure
Records of people who have left are kept for as long as the law requires, then can be erased.
Staff see their own data
Everyone can see and update their own details in the staff portal.
Backups and updates
Nightly backups
The database and uploaded files are backed up every night on your server. They can also be copied to storage you choose, off the server, protected by a password. We set this up and check it runs.
Security updates
Security fixes are included for the first year, and after that with the yearly plan. Keeping the server's operating system and PHP up to date is your host's part.
Found a security problem?
Write to hello@keelsum.com with the subject “Security”. Tell us what you found and how to reproduce it. We will reply within two working days, keep you informed while we fix it, and credit you if you wish. Please do not test against a company's live system without its permission.
Our privacy notice covers the small amount of data this website collects, such as the details you send in a form.
Book a demo
See it with your own scenarios
Book a 30-minute demo. We will show how Keelsum handles your sites, your leave rules and your payroll, and talk through hosting on your own server.
- A walk-through using your own sites and leave rules
- A clear answer on hosting, backups and support
- Your questions on payroll and data protection