Security
Payroll is high stakes. We built for it.
Tenant isolation
Every request is resolved to a partner, organization or entity before anything else happens, and the payroll engine is only ever called for records in the caller's scope.
Strong sign-in
Passwords always need a second factor: an authenticator app or an emailed code. Enterprise sign-in through Microsoft Entra ID.
Immutable audit
Every change is written once to an audit log that cannot be edited, then archived to write-once storage.
Staff access
Odin support views read-only. Any write needs a stated reason and a time limit, and your administrators are told.
Data minimization
Social Security numbers, bank details and compensation stay with the payroll engine. Odin stores identifiers, not values, and never logs them.
Signed events
Every webhook is signed so you can verify it came from Odin and was not changed.