Security & data architecture
The technical foundation
The specifics your security team will ask for. Where a control depends on your environment, we confirm the current status with your team during procurement rather than imply more than is live today.
Aggregation thresholds
Zeno’s aggregation architecture applies minimum cohort thresholds before any employer-level intelligence can be shown. General workforce signals require a minimum cohort of 8; more sensitive wellbeing signals require a minimum cohort of 12. Below the threshold, nothing is shown, so a small team can never be used to work out an individual.
Data residency & hosting
Hosting location and data-residency options are confirmed during enterprise evaluation and deployment.
Encryption & access
Data is encrypted in transit and at rest. The specific encryption, access-control and logging arrangements are confirmed during enterprise evaluation and deployment.
Authentication
The platform is designed for SAML 2.0, OIDC and SCIM. Enterprise SSO and directory integration are on the roadmap — we confirm the current status for your stack on the call, and never present it as already live.
Integrations
Objectives export to each person’s own calendar (Microsoft or Google). Zeno complements your existing systems — it is not an HRIS and does not require one to run.
Data control & retention
An employee’s Life Plan is theirs, held in their own workspace; they can delete it themselves at any time, and it does not stay behind if they leave. Objectives can be exported to their personal calendar. Retention and deletion arrangements are documented as part of the deployment and applicable data-processing terms.