Security & privacy
Pay, ID documents and clock-in locations are a business’s most sensitive data. CTAS is designed so only the right people see the right data — and you always own it.
Privacy
Ownership
For HR data in CTAS Work your organization is the data controller; CTA Solution is the processor and only processes it on your instructions to provide the service — as set out in the Data processing agreement.
Compliance
CTAS processes data under Decree 13/2023/ND-CP and the Personal Data Protection Law, with clear purposes, minimal collection and respect for data subjects’ rights.
Safeguards
Every connection between apps, browsers and servers goes over HTTPS/TLS.
Every request is checked against its organization; one organization can never read another’s data.
Admin, manager, team lead, staff — team leads see only their department; there is always at least one admin.
CTAS accounts support codes from an authenticator app, email or Zalo; Face ID and fingerprint sign-in in the app.
ID document numbers are encrypted at rest and every view is written to an access log.
The app reads location only at the moment of clocking in, never in the background.
Passwords are hashed with bcrypt and never stored or sent in readable form.
The website only enables analytics and advertising cookies with your consent, which is recorded under Decree 13/2023.
FAQ
Tell us about your business — our team usually replies within one working day.
Contact usOn cloud infrastructure from reputable providers, which may be located outside Vietnam. Cross-border transfers follow Vietnamese law, as detailed in the Privacy policy.
Only when needed to support you or fix an incident, on a need-to-know basis with restricted internal access. We never use your data for anything else.
Email support@ctasolution.vn with the subject “Security report”. Please do not disclose it publicly before we fix it, and do not test against real customer data.
In the app: Account › Delete account, or email support@ctasolution.vn. Attendance and payroll records belong to your organization and may be kept by it under its legal obligations.
We are happy to answer security questionnaires and sign a Data processing agreement for business customers.
Essential cookies keep this site working. With your consent we also use cookies to remember your choices, measure traffic and share data with advertising partners. You can change your choice at any time. Cookie policy
