Security and privacy

Your team’s information, handled with care.

Belay connects to the systems you already run and shows each person only what their role needs.

Protecting the people behind the data.

  • HIPAA compliantGoogle Cloud, USA servers
  • EncryptedIn transit and at rest
  • Role-based permissionsThrough your single sign-on

The details

What Belay uses, and how it’s protected.

What Belay uses

Belay reads the employee information your payroll, HR and survey systems already hold, like hours, pay, tenure and survey answers.

Who can see it

Your team signs in through your organization’s single sign-on. Each person sees only what their role needs, for the buildings they’re responsible for. When someone leaves your organization, their access ends with their account.

How it’s protected

Information is encrypted in transit and at rest. The most sensitive fields, like names and notes, are encrypted again with a separate key for each customer. Each customer’s data is kept apart at the database level and stored in Google Cloud’s US region.

HIPAA

Belay is HIPAA compliant. We keep the written policies HIPAA requires, sign business associate agreements with our customers, and run on Google Cloud services covered by Google’s own HIPAA agreement.

Used to support people

Belay helps leaders see who could use a conversation, and why. People make every decision. Belay is never used for discipline or hiring decisions.

You own your data

Belay works alongside the systems you already run, and doesn’t change anything in them until you ask.

Kept only as long as needed

Raw files received from your systems are deleted after 30 days, once their information is in Belay.

Questions from your security team?

We’ll walk them through how Belay handles your data, step by step.

Book 15 minutes with us