Security

Protecting employee, payroll, and company information is a shared responsibility between Rent-A-Ride Philippines and every authorized HRMS user.

The HRMS uses authenticated accounts and role-based access controls. Users should:

• Use strong passwords
• Never share credentials
• Avoid saving passwords on untrusted devices
• Report suspicious account activity immediately

The HRMS uses authenticated sessions to verify authorized access. Controls may include secure and HttpOnly cookies, session expiration, authorization checks, and account-state verification.

Administrative functions are limited according to role and assigned permissions, including Management, Branch Administrator, Payroll Administrator, and Employee access. Users receive only the access necessary for their responsibilities.

The HRMS uses encrypted HTTPS connections for supported devices and company servers. Sensitive server credentials and infrastructure secrets are not intended to be exposed to client devices.

Passwords must not be stored or transmitted in plain text. The HRMS uses secure password hashing and authentication controls.

Database access is restricted to authorized application and administrative systems. Production database credentials must not be:

• Stored in public source code
• Shared through unsecured channels
• Committed to Git repositories
• Embedded in client applications

Employee documents and uploaded requirements may be stored in private storage systems with controlled server-side access. Direct public access to confidential HR files should be restricted.

Push notification systems may use device tokens to deliver HRMS notifications. Tokens are associated with authenticated users, should not be exposed publicly, and may be disabled when a user logs out or removes a device.

Security-related activities may be logged for troubleshooting, auditing, misuse investigation, access verification, and operational accountability.

• Keep devices locked
• Install official application versions only
• Keep operating systems updated
• Avoid rooted or compromised devices where possible
• Report lost or stolen devices promptly

Report suspected unauthorized access, exposed passwords, suspicious login activity, data disclosure, compromised devices, or security vulnerabilities to support@rentarideph.com. Do not publicly disclose sensitive security information before the company has a reasonable opportunity to investigate.

Rent-A-Ride Philippines continuously reviews HRMS security controls as the system evolves and may update measures in response to system changes, emerging threats, infrastructure changes, regulatory requirements, and internal security reviews.