Who sees what, and who gets in
Three fixed roles decide who sees your people's records, and every account can add two-factor sign-in.
- Email alerts after failed and unusual sign-ins
- Signed out everywhere after a password change
- Encrypted, hosted in the US and never sold
Encrypted, hosted in the US, and walled off from other companies
Your people's records and files live on Google Cloud, through Firebase. We never sell them, use them for ads or use them to train AI models.
Every read and write is checked by the database
Your team's data travels encrypted to Google Cloud in the US. On the way, database rules check each request: your people get what their role allows, and any other company gets nothing.
Employees see their own records, HR sees the team's
Three fixed roles: one Main Admin, HR for the people who run it day to day, and Employee for everyone else. Only the Main Admin changes roles.
Two-factor sign-in, and a log of every sign-in
Anyone can turn on two-factor sign-in for their own account, with ten one-time recovery codes for a lost phone. Their Activity log records sign-ins, failed passwords and security changes with the city, browser, device and IP.
Know when someone tries to get in
Three wrong passwords in 30 minutes, a failed try from an unusual place or a sign-in from a new device, and the account holder gets an email. One click takes them to their Activity log and the password change.
Five more protections, built in
Nothing to switch on: they work for every company on every plan.
Leavers lose access the moment you terminate them
Terminate closes their access at once and cancels what's still open. Their profile, history and signed documents stay with you.
Signed documents can't be deleted
Once everyone has signed, nobody in your company can cancel or delete it.
Passwords that hold up
These rules apply at sign-up, on invitation and at every change, and the email is confirmed before the first sign-in.
Or one click with Google, Microsoft, GitHub or X
Anyone can connect one of these to their profile and sign in with it.
Only the FirstHR app gets through
Firebase App Check, with Google reCAPTCHA Enterprise, turns away requests that don't come from the app.
Free help with your own data rules
Privacy and data protection policies, an acceptable use policy and guides on personnel files and record keeping, from our library. Free, and no sign-up needed.
Reviews
"Solid app with a ton of features that cover all HR needs. I'm impressed by how well the app is organized and how easy it is to navigate."
Iskandar ChacraHead of Engineering, Ultraspeaking"FirstHR centralises every HR process, from hiring to firing, in a sleek and user-friendly interface. Especially noteworthy is its modern design."
Daniel RödlerCo-founder, Octomind"There are many HR tools out there but firstHR manages to combine lots of features into one package very well and all with an affordable price tag."
Johnberg ArslanCo-founder, AppManagerFirstHR in the press
A free trial with no strings attached
When the 7 days are up, the trial simply stops. There's no card on file, so nothing renews and there's nothing to cancel.
- Sign-up in a couple of minutes
- Every feature from day one, like the paid plans
- No credit card
- Support from real people, like the paid plans
Security questions
Works together with
Roles are set on each person in Team, and each person's own sign-in lives in their portal.
Where access is set
Set up your team with the right access from day one
Roles, two-factor sign-in and login alerts on every plan, the trial included. Sign-up takes a couple of minutes.
- 7-day free trial
- No credit card required
- Nothing to cancel