A.6.1
Screening
Manage background verification of candidate employees and securely store the documentation as evidence that this control is in place.
HR & People Management
Manage Employee Data Securely and EfficientlyPeopleSphere is an HRIS platform built for organizations that value employee-data security — bringing HR administration, document management, and leave management together in one integrated system.
PeopleSphere
58%
Of data breaches involve employee or HR data as the entry vector
Source: Verizon DBIR 2023
4–8 hrs
Average time HR teams spend per week on manual processes that could be automated
Including leave reconciliation, document filing, and reporting
PDP Law
Employee data is personal data protected under Law No. 27/2022 — breaches can lead to significant sanctions
An insecure system is a real legal risk
Employee data is one of the most sensitive assets a company holds — containing ID numbers, tax IDs, bank accounts, health histories, and other personal information. Storing it in a spreadsheet anyone can access is a real risk.
Manual HR processes — leave requests over chat, contract documents in a Google Drive folder without access control, or non-standardized onboarding — create inefficiency and compliance gaps under the Personal Data Protection Law (PDP Law).
ISO 27001:2022 Annex A.6 governs human-resource information security, including background verification, confidentiality agreements, and the offboarding process. PeopleSphere helps you meet these requirements while improving HR operational efficiency.
A simple, structured process your team can run right away.
Create a complete profile for each employee: personal data, role, division, direct manager, and system access level. Data is encrypted and accessible only to authorised parties.
Store all employee documents digitally — employment contracts, appointment letters, certificates, and NDAs — with automatic categorization. Get reminders 30/60/90 days before a document expires.
Employees request leave digitally; managers approve or reject with one click. Leave balances update automatically, the team calendar stays current, and attendance summaries are available in real time.
Run a standardized onboarding checklist: signing agreements, security-policy orientation, granting system access, and assigning assets — all documented.
When an employee leaves, the offboarding checklist ensures revocation of all system access, return of assets, and storage of final documents — leaving a complete audit trail.
Built to meet real operational needs — not just a checklist of features that look good in a brochure.
PeopleSphere is designed to help your organization meet the relevant control requirements and information-security standards.
A.6.1
Screening
Manage background verification of candidate employees and securely store the documentation as evidence that this control is in place.
A.6.2
Terms and Conditions of Employment
Manage the signing and storage of confidentiality agreements, employment contracts, and information-security terms within employment terms.
A.6.5
Responsibilities After Termination
A structured offboarding workflow ensures post-employment security obligations are enforced, including access revocation and asset return.
PDP Law
Law No. 27 of 2022 on Personal Data Protection
PeopleSphere is designed with privacy-by-design — need-based access control, encryption of personal data, and an access audit log to meet PDP Law obligations for employee data.
The following SLAs apply to all PeopleSphere Customers and form part of the mutually signed Service Agreement. All Customers receive full access to every platform feature.
* All SLAs are measured monthly and apply from the subscription activation date.
This platform is designed to address the real pain points of different roles across the organization.
Still have questions about PeopleSphere? Reach out to our team via the contact page or the footer.
Access is controlled by a strict role-based access control (RBAC) system. Employees can only see their own data. Managers can see their team's data. HR and admins have broader access as needed. Every access is recorded in the audit log.
Yes. PeopleSphere is designed on privacy-by-design and data-minimisation principles. Employees' personal data is encrypted, access is controlled on a need basis, and every access is logged. Data-retention and data-deletion features are also available to meet PDP Law obligations.
Initial PeopleSphere setup — including configuring the organizational structure, roles, and approval workflows — is typically completed within 1–2 working weeks. The Cloudsphere team supports this process, from system configuration and initial employee-data entry to training HR admins and managers, so your team is fully operational from day one.
Yes. PeopleSphere supports various types of working relationships — permanent, contract, outsourced, interns, and freelancers — each with appropriate attributes and workflows.
When an employee resigns or a contract ends, PeopleSphere triggers a standardized offboarding checklist: notifying IT to revoke system access, recording the return of assets, storing final documents, and recording that every step has been completed — leaving a complete audit trail.
Schedule a free demo and see firsthand how PeopleSphere can simplify hr & people management in your organization.