How long does Empuls retain CCTV recordings in secure areas?

​

Physical Surveillance as a Security Control

Physical security is a foundational layer of Empuls’s overall data protection posture. Alongside digital safeguards such as ISO 27001 certification and SOC 2 Type II attestation, Empuls enforces strict physical surveillance controls in all areas where sensitive data is accessed, stored, or processed. CCTV cameras are installed at every entry and exit point of secure operation areas within Empuls facilities. Coverage extends across all inward and outward movement through dedicated operational zones. There are no blind spots at perimeter boundaries — all access corridors are monitored in real time, around the clock.

​

The 90-Day Recording Retention Policy

All CCTV recordings are retained for a minimum of 90 days before any automatic overwrite occurs. This retention window ensures that security incidents, unauthorized access attempts, or anomalous physical activity can be reviewed and investigated within a meaningful timeframe. The 90-day threshold aligns with enterprise-grade security standards and supports the audit requirements common in regulated industries. For organizations integrating Empuls with HR platforms such as Workday, SAP SuccessFactors, or Darwinbox, this physical surveillance layer complements the digital access trails those integrations generate. When an administrator accesses Empuls via SSO from one of these systems, both the digital session log and the physical entry record exist independently — providing a dual-layer audit trail.

​

Continuous Monitoring of Secure Zones

Monitoring is active around the clock, not limited to business hours. Secure dedicated operation areas — where data processing for sensitive workloads occurs — are under constant surveillance, ensuring every access event is captured and time-stamped regardless of when it happens. This approach mirrors the physical security expectations defined in ISO 27001 Annex A.11 (Physical and Environmental Security) and is consistent with the operational security controls evaluated under SOC 2 Type II audits. Organizations in banking, financial services, and regulated HR environments can reference Empuls’s physical security posture directly within their own compliance documentation.

​

Why This Matters for Enterprise HR Teams

When HR teams use Empuls to manage employee recognition and rewards data, they need assurance that the infrastructure handling that data meets enterprise-grade physical security requirements. The combination of perimeter CCTV coverage, real-time monitoring, and a 90-day retention policy means Empuls’s physical controls are as rigorous as its digital ones. Whether your organization communicates over Slack or Microsoft Teams, or relies on Darwinbox or SAP SuccessFactors for core HR functions, Empuls fits into your security and compliance framework without requiring exceptions. The surveillance infrastructure operates transparently in the background, so security and IT teams can include it in audit responses with confidence. Learn more: Empuls Help Centre — Security Compliance