Identity & MFA
Individual staff accounts and authenticator verification protect workspace access. Sensitive actions require the relevant additional verification. Public user records are never a passwordless entry into someone else’s account.
Security & trust
Controls, not shortcuts.
Security is about who may act, which company owns the record and what evidence supports the decision. We describe those boundaries directly rather than treating a logo or a certification claim as proof.
Designed boundaries
Authority stays explicit.
Company isolation
Company membership, module entitlement and record-level permissions govern access. A matching email domain or platform-administrator role is not a substitute for company-local authority.
Financial field permissions
ATS financial reads use masked views and authoritative calculation. HRMS salary, banking and tax data require separate permissions and MFA. Credentialing does not inherit pay-package visibility.
Credential boundaries
Secure Access has no normal team password reveal, copy or export workflow. Destination-bound launch authorization reduces routine exposure. Privileged endpoint extraction remains a real limitation of browser-delivered credentials.
Preserved history
Approval events and finalized financial snapshots preserve accountability. Access removal is not account impersonation, deletion of employment history or an automatic HR exit.
Visible Work pilot
No install-triggered collection. The pilot requires verified employment, employee-authenticated acknowledgement, independent company policy approval, visible controls and real-device acceptance before authorized monitoring.
Honest limitations
What this website does not certify.
No SOC 2, ISO or HIPAA certification is claimed. Regulated-data use, contractual safeguards, service levels and any BAA must be reviewed for the specific engagement. Do not submit patient protected health information without an expressly approved agreement and configuration.
Third-party MFA and CAPTCHA are never bypassed. Brokered Access remains in development. Work hosted enrollment is release-blocked; Payroll bank execution is not advertised as live. An implemented control still needs deployment and acceptance evidence.
Review & disclosure
Give your security team the context.
Report concerns privately to info@pulsehirex.com. Do not send passwords, recovery codes, private keys or unnecessary personal information.
Start with your operation
Bring the workflow.
We’ll bring the walkthrough.
Show us the client systems, staffing process or internal people workflow you want to improve. We’ll discuss fit, availability and the steps to a controlled rollout.