Security Details

This page summarizes current product controls; it is not a security certification, independent audit, uptime promise, or recovery-time commitment.

Access and protection

Commishify uses authenticated access, account-scoped server-side authorization, HTTPS/TLS, and selected in-app audit history. Application errors are recorded for operational review. Infrastructure controls and recovery depend on the deployment environment.

Data boundary

Do not send credentials or real payroll, commission, or employee records through the public contact form.