K-HR
K-HR security, privacy and where data is stored
K-HR holds personal data, so it limits who sees what and keeps a record of every change. This page explains the safeguards in place today.
Last updated
What you need
- A Khanal ID with two-step verification
- The Organisation admin or HR manager role to read the audit log
Check who sees what
- Open the user menu → Team and read What each role can do.
- Give HR manager only to people who should see every employee, document and statutory record.
- Set Reports to on each employee: a manager sees only the people who report to them.
- Open the user menu → Privacy to read the notice employees see.
Read the audit log
- Open the user menu → Audit log.
- Read the latest 300 entries, and the line that says whether the audit trail is intact.
- Click Export CSV for the full log.
Ask for data to be deleted
- Download what you need first (see Export your data).
- Write from your account e-mail to hello@khanals.in.
- We delete the data within 90 days, except what the law requires us to keep.
Good to know
- Records are in a database on Khanal Group servers in India. ID proofs and documents are private files there, never in a shared cloud folder, opened only by HR managers, admins or the employee; every opening is logged.
- Location is read only at check-in and check-out with consent, and deleted after 13 months by default. Only the last four digits of Aadhaar are kept. Managers never see documents.
- The audit log is a hash chain: entries cannot be changed or deleted, and a removed entry shows. POSH cases are open only to HR and the committee.
- Backups are encrypted, nightly, kept up to 12 months. Details: Security.
Common errors
"Only HR and the Internal Committee can open this."
POSH committee pages are restricted. Ask HR if you should be a committee member.
An employee wants a copy of their data
They open My profile → Download my data (JSON). The download is recorded in the audit log.
Can I delete an employee record?
K-HR has no delete button for employees; record an exit instead. You can delete an uploaded document from the employee's page. For full deletion, write to hello@khanals.in.
Still stuck?
Email hello@khanals.in with the app name, what you clicked and the exact message you saw. Do not send passwords, PINs or authenticator codes. You can also use the contact page.