Security · Reviewed September 2026
PerformSpark uses access controls, encryption, authentication, resilient infrastructure, backups, and operational monitoring to help protect performance and employee information. For teams evaluating performance management software security, this page explains the safeguards to review and the questions to confirm during procurement.
.svg)
.svg)
PerformSpark is hosted on AWS and uses configured cloud infrastructure controls to support availability, scalability, and data protection.
Isolated VPC environments, strict security groups, and access control policies limit exposure and restrict traffic to only what’s required.
.svg)
Built-in AWS protections defend against distributed denial-of-service (DDoS) attacks and help maintain platform availability.
Monitoring and alerting processes help the team review unusual activity and respond to potential security events.
.svg)
Documented response procedures support investigation, mitigation, and communication during security incidents.
.svg)
Multi-zone deployment is designed to improve resilience and help maintain service availability during infrastructure disruptions.
Performance management data protection includes how HR information is stored, backed up, recovered, retained, and made available. Confirm architecture, retention, recovery objectives, and availability requirements during your security review.
Backup and retention processes are used to support recovery. Specific retention, recovery, and availability terms should be confirmed in the applicable service documentation.
Security for HR performance software should include account-protection controls such as password hashing and multi-factor authentication (MFA), alongside appropriate access and permission controls for employee information.
Security patches and dependency updates as part of ongoing maintenance.
.svg)
Code reviews, automated scanning, and adherence to OWASP Top 10 guidelines.
Role-based permissions with detailed audit logs.
Request a security review to confirm current controls, architecture, data handling, and any organization-specific requirements.
.svg)
.svg)
.svg)
