Skip to content

Security

Know who can see a published roster

A project administrator’s app login and a worker-facing roster link serve different purposes. Check the access model before sharing employee information.

View demo
01

Admins sign in; project roles matter

The app uses individual administrator accounts, project assignments and sign-in verification. Roster review and publishing are part of the signed-in project workflow, not actions available through the public demo.

02

Worker links are not individual logins

A person with a project’s roster link or QR code can search its published roster by name without a worker account. Treat the link and results as shareable with anyone who receives it; do not publish information that requires worker-only authentication.

03

The workbook is your responsibility

Uploads can contain names, employment numbers, employers, locations, dates and shift codes. Administrators must have authority to provide these records, check the proposed version and avoid importing unnecessary personal details.

04

Custom status text is data too

Unfamiliar daily labels can be preserved rather than omitted. Inspect them for medical details, private notes or other information unsuitable for a shareable worker view. Blank mappings do not redact text; use a deliberate source-cell correction or correct the workbook, refresh and inspect the result.

05

Optional mapping assistance has a separate boundary

AI mapping assistance is disabled by default and is not used by the public demo. When configured for the signed-in app, only a locally anonymised structural sample from the first 40 rows and 40 columns is submitted to OpenAI, not the raw workbook. Administrators still check the mapping and publication.

06

Public demo stays separate

The public demo runs the actual CSV/XLSX importer and review without connecting to a live tenant, account or publication. It starts with fictional records. If you choose a file, it is uploaded to separate private temporary storage; use only non-sensitive test data. Publishing is disabled.

07

Review the full policy

See the Privacy Policy for information about original uploads, published versions, offline copies, retention and requests to correct information. Contact us if your operation needs a specific hosting or procurement detail confirmed before uploading data.

See the real roster review before you sign up.

Try a fictional roster in the isolated import sandbox, or upload a small, non-sensitive CSV or XLSX test file. Publishing stays disabled.

View demo