How Kredily protects your data (and IP restriction)

"Is my data safe with Kredily?" is one of the most-asked questions we get. This article explains, in practical terms, who can see what inside your Kredily account and the controls an admin has over access.

Access is role-based — nobody sees more than their role allows

Everything in Kredily is gated by the admin-role permission matrix:

• Employees see their own records — their payslips, leave balances, attendance and profile — not anyone else's.
• Managers and admins see only what their assigned role carries. Sensitive fields (PAN and other IDs, salary and bank details, payroll access) are separate capabilities in the matrix, so you can give someone directory access without exposing pay data.
• The five admin roles and the exact capability grid are described in Admin roles & the permission matrix — use it to audit who can view sensitive info before you assign a role.

The AI co-pilot respects the same permissions

AI features don't create a side door. The co-pilot only answers with data the asker is already permitted to see, and it won't reveal another employee's personal or payroll data regardless of how a question is phrased — see Asking the co-pilot and how privacy works.

Account-level protections

• Every user signs in with their own credentials on your company's URL (yourcompany.kredily.com); password resets go only to the registered email — see Login & account access.
• Admins control who is invited, active or inactive; deactivating an employee removes their access immediately — see Make an employee inactive.

IP restriction

Organisations that want logins limited to trusted networks (for example, only from the office) can restrict access by IP. If you need IP restriction enabled or changed for your account, raise a ticket with your office network's public IP range and our team will help you configure it.

Common issues

• "Can another employee see my salary?" — not unless an admin has explicitly been granted the salary/payroll capability for their role. Check the permission matrix.
• "Can Kredily staff see our data?" — access for support purposes follows the same need-based discipline; raise a ticket if you want specifics for a compliance review, and our team will document what applies to your account.

When to contact support

Raise a ticket for: enabling/adjusting IP restriction, a data-access question for a compliance or vendor-security review, or if you believe someone can see data their role should not allow.