A folder link is not access control

Employee records carry the most sensitive material a company holds: pay, performance, medical accommodations, disciplinary history. On a shared drive, access to them is whoever has the folder link, and the record of who opened a file is nothing at all. A record two people should see is one forwarded link away from being seen by twenty.

The current version is a matter of who saved last. Proving what a record said on a given date, and who could see it, means trusting that the folder was managed correctly every time. In records that carry this much, that cannot be left to a convention.

Records move into a database with access scoped to the role

We move personnel records into a database where access is scoped, so each record is visible only to the people cleared for it. A manager, an HR partner, and the employee each see what they should and no more. Access is a rule the system enforces, not a link someone chose to share.

Each record is versioned and carries its own attributes and retention, so the current version is the one the system marks current, and a record due to be purged on a schedule is, without anyone remembering to.

Who changed a record, and who saw it, is a query

Every version, edit, and access is attributed as the record moves, tied to a person and a time. When you need to show who updated a file, what it said when a decision was made, or who had sight of it, the answer is a query against the record instead of a reconstruction from folders and email.

An embedded agent reads across the records a person is cleared to see, answers with a citation to the record and version, and drafts from templates, and every output is a proposal a person signs off. The shared drive, and the guesswork about who could open it, are gone.

/ start

Move the personnel records off the shared drive

Tell us where your employee records live and who is meant to see them, and we scope it. Or email hello@mcintoshsystems.com.