We ask for the fewest fields the work requires

Data minimization is a design decision we made early, not a policy page we wrote later. Sending the right item to the right person on the right date needs a narrow slice of what your HR system holds.

Event type, effective date, name, work location, department or cost center, eligibility flags. Not compensation, not Social Security numbers, not performance detail. Integration is staged deliberately: a secure CSV export first, single sign-on next, then API and webhooks once the workflow is validated. Least privilege access, retention limits, decision logs, and a per-employee pause or suppress control from day one.

Access runs on least privilege. Retention is bounded by agreed limits rather than kept indefinitely. Decision logs are retained separately from personal data. Every employee record carries a per-employee pause and suppress control, so an individual can be held out of a program for any reason, permanently or for a period, without an exception process or a support ticket.

This site has no analytics and no forms that post anywhere real. Demo requests go to Request a demo. Privacy questions go to hello@giftworx.ai.