/ solutions / people operations / employee records
A personnel file only the right people can open, with every change attributed
Employee records live in folders, filing cabinets, and inboxes, where access is whoever holds the link and the current version is whoever last saved a file. We move them into a database that is versioned, access-controlled, and attributed, so a personnel file is visible only to the people who should see it, the current record is the one you find, and every change is tied to a person and a time.
A folder link is not access control
Employee records carry the most sensitive material a company holds: pay, performance, medical accommodations, disciplinary history. On a shared drive, access to them is whoever has the folder link, and the record of who opened a file is nothing at all. A record two people should see is one forwarded link away from being seen by twenty.
The current version is a matter of who saved last. Proving what a record said on a given date, and who could see it, means trusting that the folder was managed correctly every time. In records that carry this much, that cannot be left to a convention.
Records move into a database with access scoped to the role
We move personnel records into a database where access is scoped, so each record is visible only to the people cleared for it. A manager, an HR partner, and the employee each see what they should and no more. Access is a rule the system enforces, not a link someone chose to share.
Each record is versioned and carries its own attributes and retention, so the current version is the one the system marks current, and a record due to be purged on a schedule is, without anyone remembering to.
Who changed a record, and who saw it, is a query
Every version, edit, and access is attributed as the record moves, tied to a person and a time. When you need to show who updated a file, what it said when a decision was made, or who had sight of it, the answer is a query against the record instead of a reconstruction from folders and email.
An embedded agent reads across the records a person is cleared to see, answers with a citation to the record and version, and drafts from templates, and every output is a proposal a person signs off. The shared drive, and the guesswork about who could open it, are gone.
/ start
Move the personnel records off the shared drive
Tell us where your employee records live and who is meant to see them, and we scope it. Or email hello@mcintoshsystems.com.