1. Multi-Tenant Isolation & Org-Scoped Access
Lezore operates a modern multi-tenant cloud architecture where every data point is strictly bound to your Organization ID.
Every API endpoint validates the caller's organization membership before executing, and every database query is filtered by that Organization ID.
Financial numbers, contractor profit margins, and global worker base rates are stripped server-side before response dispatch to site supervisor mobile devices.
2. Encryption in Transit & at Rest
We apply standard encryption controls across the application:
- In Transit: All traffic is served over Transport Layer Security (TLS), with HTTP Strict Transport Security (HSTS) enforced on our web application.
- At Rest: Data at rest is encrypted by our cloud database provider (Supabase).
- Identity Documents: Lezore does not collect or store government identity numbers such as Aadhaar or PAN.
3. Offline Attendance Sync
Construction sites frequently face poor 2G/3G connectivity. Lezore queues attendance marks locally and replays them when the network returns:
Offline attendance marks are queued in the browser's IndexedDB on the web app, and in local app storage on mobile, then replayed to the server automatically when connectivity returns. Entries the server rejects are surfaced for review rather than silently dropped. Offline support covers attendance marking; other records require a connection.
4. Audit Trail & Operational Logging
Trust requires total transparency. Every critical operational event—including worker salary rate revisions, site transfers, advance allocations, role permissions, and monthly payroll finalizations—generates a timestamped audit entry.
Organization owners can inspect complete historical change logs anytime directly from Settings > Audit Log.
5. Backups & Data Export
Your data is backed up by our database provider, and you can export it yourself at any time:
- Provider Backups: Our database provider takes automated backups of the underlying database.
- 1-Click Backup Hub: Admins can instantly export a full JSON archive of the workspace — worker rosters, attendance, advances, payments, payroll history and the audit trail.
6. Responsible Vulnerability Disclosure
We welcome vulnerability reports from independent security researchers and white-hat community members. If you discover a potential vulnerability in Lezore, please disclose it responsibly: