Data Handling & Auditability
How Optserv handles your company's data — data residency, access policies, and auditability practices.
Data ownership
Your company's data is yours. Optserv stores it on your behalf to provide the service. We do not sell, analyze for advertising, or share your people data with third parties.
Data residency
Optserv's infrastructure is hosted on Supabase (PostgreSQL). Data is stored in the cloud region associated with your Supabase project. If data residency is a compliance requirement for your company, contact support before signing up.
Who at Optserv can access your data
Optserv team members do not have routine access to your company's data. Access for support purposes requires:
- An explicit support request from a company Admin
- Internal approval
- Logged access (audit trail)
Account Sharing credentials are never accessible to Optserv — client-side encryption means we cannot decrypt them even if we wanted to. See Accounts Vault Crypto.
Offboarding and data retention
When an employee is offboarded in Optserv:
- Their profile is set to "offboarded" status
- They lose access to the web application
- Their records (attendance, leave, documents) are retained for historical reference
- Admins and HR can view offboarded employee records
Data is not automatically deleted on offboarding. Historical records are important for compliance, payroll audits, and legal purposes.
Company deletion
If you delete your company from Optserv, all associated data is permanently removed. This action is irreversible and requires Admin confirmation.
Before deleting, export any records you need to retain for compliance purposes.
Auditability
Optserv does not currently offer a self-serve audit log for all actions. Key events that are logged:
- Employee invitations and role changes
- Leave and overtime approval decisions
- Account Sharing access list changes
- Company settings changes
Audit log export for compliance purposes is available to Admins on request. Full self-serve audit log UI is on the roadmap — see Roadmap.
Data requests
For data export, deletion, or compliance-related inquiries, contact support@optserv.ai from an Admin account.