Confidentiality Policy

Last updated: 28 August 2026

This document sets out the confidentiality rules that apply to HR data processed in AXIUM RH by SIFO HOLDING. It complements the Privacy Policy (collection and individual rights).

1. Purpose

Information relating to employees, contracts, attendance, leave, missions and organisation is confidential professional data. It may be used only for human-resources management and in the course of employment.

2. Multi-tenant isolation

AXIUM RH isolates data by company (tenant). A user may only access information within their scope. Cross-organisation viewing or export is not allowed except where rights have been explicitly granted.

3. Permission-based access

Access to screens and APIs (including the mobile application) is controlled by HR permissions. Managers, employees and administrators see only what their role allows (individual file, team, or HR scope).

4. Non-disclosure

Anyone with access to AXIUM RH must not disclose, copy or transmit HR data to unauthorised third parties (including outside professional channels). This duty continues after access to the application ends, to the extent permitted by applicable law.

5. Security measures

• authentication via JWT tokens and secure sessions;
• HTTPS communications;
• company-level (tenant) data filtering;
• logging of sensitive actions when the audit module is enabled.

6. Incident reporting

Any unauthorised access, loss, leak or misuse of HR data must be reported without delay to HR or the publisher, using the contact details below, so that containment and notification of affected individuals can be initiated.