Security
Tanzeem holds salaries, tax records and personal files, so it was built multi-tenant from the first table.
How your data is protected
Tenant isolation
Every record belongs to one company, and every query is scoped to it on the server, from a verified sign-in token.
Audit log
Who changed a salary, approved a run or changed a role, with the before and after value.
Custom roles
Roles are built from named permissions and checked by a permission engine on every request. Ownership of the company is never grantable.
Owner read-only preview
The owner can view the app as another person to check what they see. Nothing can be changed, and the preview ends after 30 minutes.
Soft delete
Deleting a record archives it instead of erasing it, so history and the audit trail stay intact.
Encrypted transport
All traffic between your browser and Tanzeem is encrypted with HTTPS.
Single sign-on
Sign in with a Microsoft Entra or Google work account.
Coming soon
Hosting and disclosure
Hosted on AWS. Region details on request.
We do not hold an ISO or SOC certification yet.
Found a vulnerability? Email security@tanzeem.io. Please do not include credentials or personal data in your message.
Bring last month’s payroll sheet to the demo
We will run it through Tanzeem on the call and show you each payslip, with the working, before you decide anything.