Trust
Security & privacy in plain language
Written for owners and CAs - not security theatre. Where the software runs, what leaves the machine, and what still needs you.
Where it runs
ZerostaffOS installs on your Windows PC. The hub is a local browser page (typically 127.0.0.1). It is not a multi-tenant cloud app where we host everyone’s payroll.
What stays on the machine
- Employee master, ledger, inventory, activity log (Excel/JSON under your ZerostaffOS folder)
- Chat history and agent memory
- Encrypted backups you schedule locally (or to a folder you choose)
Nothing is uploaded for “AI training.” Optional LLM calls (if you enable them) are for FAQ-style help - money decisions stay rule-gated.
Sensitive fields
PAN, bank account, salary-style fields can be encrypted at rest. Unlock needs your owner password or recovery phrase. Lose both, and those encrypted fields cannot be recovered (names and non-sensitive ops data stay readable).
Risk gates
Large payments, payroll, and offer letters require your confirmation. Agents log actions; they do not silently move money or e-file GST.
License binding
A license is bound to the device (hostname + disk identity). Reinstalling Windows or replacing the drive can look like a new machine - use a transfer code before you reinstall when possible. Your Excel files are not deleted when a license blocks.
Exports
When you export for your CA, that zip is unencrypted on purpose so they can open it - treat it like printed payroll papers.