Security, privacy and compliance
Performance data is some of the most sensitive information a company holds. MeritFlo is built around access control, auditability and data protection — and we are transparent about what is certified today versus in progress.
How we protect your data
Role-based access control
Employees, managers, HR and leadership each see exactly what their role permits — nothing more.
Encryption in transit and at rest
TLS for every connection; encrypted storage for data at rest.
Complete audit trails
Every score, change and decision is logged with who, what and when — built for HR-grade accountability.
Data residency options
India and GCC hosting options for customers with residency requirements — see our data residency page.
Certifications: in progress
ISO 27001 and SOC 2 certification programs are underway. We publish status honestly — no badges before the audit.
Regulatory alignment
Alignment with India’s DPDP Act and GCC data-protection frameworks is being finalized with legal counsel; documentation is available on request.
Frequently asked questions
By default in region-appropriate cloud infrastructure, with India and GCC residency options for customers who require it. Specifics are documented in your agreement — see the data residency page for details.
Bring your security team to the demo
We’ll walk through architecture, access control and data handling with the people who need to sign off.
Pricing that scales from 50 to 5,000 employees.