Security at PEOLens
PEOLens handles employee censuses, payroll figures, and benefits data. This page describes, in plain language, exactly how that data is protected today. Nothing here is aspirational.
Who can see what
Every request is checked on the server against the signed-in user's role: broker, client, or PEO representative. Clients see only their own company's submission and plain-language status. PEO representatives see only deals dispatched to their own organization, with company facts only, and can never see other PEOs' activity, pricing, or internal notes. Internal notes and PEO contact details never leave the server for non-admin users. Hiding something in the interface is never the control; the API refuses the request.
How your documents are handled
Uploaded documents (census files, invoices, plan summaries, quotes) are stored in access-controlled cloud object storage and served over HTTPS. Documents are linked to a single company's record and are only reachable through the same server-side ownership checks as everything else.
Sessions and sign-in
There are no passwords to steal: sign-in uses expiring, signed links sent to your email, and sessions are signed tokens with a fixed lifetime. Invite links for clients and PEO representatives are signed and time-limited, and an existing account can never be entered through a shared link; re-entry always goes through the account's own inbox.
Accuracy controls
Numbers extracted from quote documents are verified against the document text and recomputed in code before they can appear in any client-facing report. Unreviewed data is marked as draft and is blocked from client deliverables. Every correction is logged, and every status change and sensitive action is written to an append-only audit log.
What we do not do
We do not sell or share your data with anyone outside the deal you asked us to work. PEOs receive exactly the submission you approved for dispatch, and nothing is ever emailed to a PEO without an explicit human action.
Where things run
The application runs on Vercel, data lives in Airtable, and documents live in Vercel Blob storage, all over encrypted connections. These providers maintain their own independent security programs.
Honest limits
PEOLens does not currently hold a SOC 2 report or HIPAA certification, and we will not claim standards we have not been audited against. If your review requires specific controls or documentation, email hello@peoconsultingpartners.com and we will walk through our practices directly.
Questions: hello@peoconsultingpartners.com