HomeSecurity
HR data needs more than a permissions table – it needs traceable, multi-layer protection.
The PDVS security model covers authentication, permission management, object-level access, audit, sign-in monitoring, IP control and encryption of sensitive employee data. It helps control who can see specific information and what they did in the system.
Key functions and business benefits
Who can see specific information – and what they did in the system.
- 012FATOTP or e-mail one-time codes add protection to accounts – for users and administrators alike.
- 02Sign-in protectionTemporary lockout after failed attempts; password strength requirements and a check against known breaches.
- 03Roles and object permissionsAccess is managed not only per page but per specific employee, document or process.
- 04Protected filesSensitive uploaded files are served only to authorised users according to the set access rules.
- 05Encryption of sensitive dataPersonal ID number, address, salary, IBAN and integration credentials are stored encrypted.
- 06Audit logCreated, changed and deleted records carry an action history: who, when, from which device.
- 07Sign-in logSuccessful and failed sign-ins are recorded with browser, OS, device and IP metadata.
- 08IP control and rate limitingIPs can be blocked, unauthenticated request rates limited and attempts monitored.
- 09CSP and XSS protectionA content security policy and HTML sanitisation reduce the risk of client-side attacks.
The model
Five layers – from sign-in to monitoring.
- 01Sign-in2FA, lockout after failed attempts, password policy
- 02PermissionsRoles, object-level access, least privilege
- 03DataEncryption of sensitive fields, protected files
- 04AuditAction history with user, time and IP
- 05MonitoringSign-in log, IP control, rate limiting
| Time | User | Status | IP | Location | Browser / OS | Duration |
|---|---|---|---|---|---|---|
| 2026-09-04 14:22:31 | Rasa Kazlauskienė r.kazlauskiene | Successful | 10.0.4.17 | Vilnius, LT | Edge / Windows | 72 min. |
| 2026-09-04 13:58:04 | Tomas Petraitis t.petraitis | Successful | 10.0.4.31 | Kaunas, LT | Chrome / macOS | 47 min. |
| 2026-09-04 12:41:19 | a.novikov unknown user | FailedLocked | 185.42.19.7 | Ryga, LV | curl / — | — |
| 2026-09-04 11:15:52 | Gintarė Urbonaitė g.urbonaite | Failed | 10.0.4.44 | Vilnius, LT | Safari / iOS | — |
| 2026-09-04 08:03:27 | Mantas Jankauskas m.jankauskas | Successful | 10.0.9.5 | Klaipėda, LT | Edge / Windows | 5 val. |
The point
We start from the business meaning: protection of sensitive data, least privilege, traceability and the ability to investigate an incident. Technical details live in the security annex we provide to IT and compliance teams.
Related solutions
DMS / QMS
Codes, versions, revisions, review, annotations, register, acknowledgement, multi-company scope.
Read more → INTIntegrations
Microsoft 365, Dokobit, Vikarina, Rivilė, BioStar 2, Worksober, OpenAI / Azure OpenAI, SMTP.
Read more → PDVSAbout PDVS
The product idea, implementation principles and pricing by scope.
Read more →