ALBERO
Engineering ambitious products
Albero HRM

Your HRIS, payroll, ATS and helpdesk in one place

Albero HRM runs employees, attendance, payroll, recruitment and performance from a single secure workspace — with encryption, an immutable audit trail and role-aware access built in.

30 modules · 12 integrations · 4 roles

app.albero.in/hrm
People operations at a glance

Headcount, attendance and everything waiting on you, in one place.

Search anyoneAsk AI
1,290Employees+3.2%
96.2%Attendance this month+1.1%
7Awaiting your approval2 added today
HeadcountLast 10 months
Approvals7 open
ASLeave · A. Sharma3 days · CasualApprove
RKExpense · ₹8,420Client travelReview
PMOffer · Senior designerBand L4Sign
The HR dashboard.
  • AES-256 encryption
  • Append-only audit trail
  • Multi-tenant isolation
  • Role-based access
The problem

What running HR on six tools actually costs

One employee, five versions

The HR system holds one record, the attendance tracker holds another, and payroll runs off a spreadsheet someone maintains by hand. Reconciling them is a monthly job nobody wants.

Nobody can answer "who approved this?"

Approvals happen in email, chat and corridors. When finance or an auditor asks who signed off a salary change and when, the answer is a search through inboxes.

Compliance work starts the week before the audit

Records get reconstructed under deadline rather than captured as the work happens, so the evidence is only ever as good as somebody’s memory of it.

The platform

30 modules, one set of records

Grouped the way people work rather than the way software is usually sold. Every module reads and writes the same employee record, so nothing needs reconciling at month end.

Overview

Where every role lands after signing in.

3

Dashboard

The numbers that matter to you, scoped to what you are allowed to see.

Approvals

Every request waiting on you — leave, expenses, offers — in one queue.

AI Assistant

Ask a question in plain English and get an answer from your own records.

People

The employee lifecycle, from offer accepted to final settlement.

9

Employee management

One record per person — profile, documents, history and reporting line.

Preboarding

Collect documents and details before day one, so day one is not paperwork.

Onboarding

Task lists, asset handover and introductions, tracked to completion.

Attendance & time

Clock-ins, regularisation and overtime against the rules you configure.

Shifts & rosters

Build rotating shift patterns and publish rosters your team can see.

Leave management

Policies, accruals, holiday calendars and multi-step approval chains.

Performance

Goals, review cycles and feedback captured against the employee record.

Exit & offboarding

Notice, clearance, asset return and final settlement in one checklist.

Vision

Consent-first workplace analytics from CCTV — face templates, never images.

Finance

What people cost, and where it goes.

4

Payroll

Run salaries against attendance and leave, then produce payslips.

Expenses

Claims with receipts, routed to the approver your policy names.

Asset management

Issue, track and reclaim laptops, devices and licences per employee.

Billing & plan

Your subscription, payment method and invoices — admins only.

Talent

Hiring and growing the people you already have.

3

Recruitment (ATS)

Roles, pipelines, interview scheduling and offers against one candidate record.

Learning (LMS)

Assign courses and learning paths, then track who actually finished.

Timesheets

Log hours against projects and clients for billing and capacity.

Workplace

The connective tissue — communication, records, automation and control.

11

Announcements

Company-wide or team-scoped notices, with read tracking.

Engagement

Pulse surveys and recognition, reported without exposing individuals.

Documents

Policies, contracts and letters, filed against the people they concern.

HR helpdesk

A ticket queue for employee questions, so nothing lives in a DM.

Reports & analytics

Headcount, attrition, cost and attendance, cut by the fields you use.

Organisation chart

The reporting structure that drives approvals and manager scope.

Workflow automation

Trigger tasks, notifications and approvals when a record changes.

Integrations

Connect identity, chat, payments and finance to the same records.

Security & access

Roles, scopes and entitlements, with a checker that explains each answer.

Audit log

Who did what, when, from where — append-only, with redacted diffs.

Settings

Policies, fields, approval chains and branding for your workspace.

For HR service providers

A separate, operator-only control plane for firms running HR on behalf of their clients.

4

Client companies

Every client workspace, its plan and its module entitlements.

Revenue & invoices

What each client is billed, and what has been collected.

Platform security

Operator-level controls across every workspace you run.

Cross-client audit log

One trail spanning every client — including every support entry.

Product tour

A workspace your whole company will actually enjoy

Fast, clean and thoughtfully designed — from the HR command centre to every employee's self-service home.

People operations at a glance

Headcount, payroll and everything waiting on you, in one command centre.

app.albero.in
+8.4%
1,290Total employees
+3.1%
₹2.4CrPayroll this month
+1.2%
96.2%Attendance
Workforce growthLast 8 months+27%
Headcount by team1,290 people
5 teams
  • Engineering38%
  • Sales22%
  • Operations18%
  • Support12%
  • G&A10%
ASLeave · A. Sharma2 days · CasualApprove
RKExpense · ₹34,900Client travelReview
PMOffer · Sr. DesignerBand L4Sign
Albero AIThree approvals have been open longer than your two-day SLA.
Role-aware access

The same platform, four different products

What someone sees is decided by who they are, not by which link they were sent. Permissions carry scope as well as verbs — “view employees” means direct reports for a manager and the whole company for HR.

Admin

A client's owner. Everything HR can do, plus the plan, payment method and invoices.

HR

Full access to every people module and organisation-wide data. Deliberately no billing.

Manager

Their team, approvals and people analytics.

Employee

Self-service — payslips, leave, documents, tasks and profile.

What each role can do
CapabilityAdminHRManagerEmployee
People data in scopeWhole companyWhole companyTheir teamThemselves
People modulesTeam onlySelf-service
ApprovalsTheir teamRaise only
Reports & people analyticsTheir team
Payroll & expensesOwn payslips
Billing, plan & invoices
Audit logCompanyCompany

Scroll the table sideways on a narrow screen.

Security & compliance

Written for the person who reviews it

Below is what is running in production today, described precisely enough to check. What is not built is listed underneath rather than left out.

AES-256-GCM encryption at rest

Aadhaar, PAN, passport, bank account, IFSC, tax identifiers, salary and medical notes are encrypted at rest. Separate encryption keys per data domain, so they rotate independently. Authenticated encryption means a tampered record fails to decrypt rather than returning wrong data.

Append-only audit trail

Every action records who, when, from which IP, which browser and device, and what changed before and after. Immutability is enforced in three independent layers: no write route exists, the ORM refuses updates and deletes, and a database trigger rejects them for any client — including one connecting directly to the database.

Redacted audit diffs

The trail records that a salary changed, never the figure — so it never becomes an unencrypted copy of protected data.

HTTPS enforced everywhere

Plain-HTTP reads are redirected; plain-HTTP writes are refused outright, because their contents already crossed the network in the clear. HSTS with a two-year max-age and preload.

Session tokens the page cannot read

Sessions live in httpOnly cookies, unreadable to page scripts, with CSRF double-submit protection on every write.

Sign-in rate limiting

Per-IP and per-account limits on authentication attempts, against brute force.

Role-based access with scope

"View employees" means direct reports for a manager and the whole company for HR — permissions carry scope, not just verbs. An access checker explains why any answer was given.

Multi-tenant isolation

A company's identity comes from the authenticated session, never from anything the browser sends. Module entitlements are per tenant, and suspending a client blocks every login immediately.

Consent-first workplace analytics

The Vision module stores mathematical face templates rather than images, requires a recorded consent per person, falls back to anonymous without one, caps retention, and audits everyone who views surveillance data.

Fails closed on insecure configuration

Production refuses to start with missing encryption keys, HTTPS disabled, or default credentials.

Not available today — on the roadmap

We hold no security certification, and we will not imply one. If any of the following is a requirement for you, it is a reason to wait rather than a reason to sign.

  • SSO (SAML / OIDC)
  • SCIM provisioning
  • Data loss prevention
  • Report watermarking
  • SIEM export
  • IP allowlisting
  • Device trust
  • Virus scanning on uploads
  • Idle and absolute session timeouts
  • Self-service data export, correction and deletion requests
AI assistant

It does the boring half of HR, not a chat bubble

Three concrete jobs, done against your own records. No general-purpose chatbot bolted onto a form.

Answers from your own documents

Ask what the notice period is for a band, or how many casual leaves carry forward, and the assistant answers from the policies you uploaded — not from the open internet.

Drafts the writing nobody enjoys

Job descriptions from a role brief, and review summaries from the goals and feedback already on the record. You edit rather than start from a blank page.

Surfaces anomalies before you look

Flags attendance and payroll records that break the pattern — a shift that never clocked out, a payslip that jumped without a linked change.

The assistant never sees encrypted identity fields. Aadhaar, PAN, passport, bank and tax identifiers stay encrypted and out of scope for every prompt.

Albero assistantAnswers from your policies and records

How much notice does a band L4 engineer have to serve?

Sixty days, per your Employment Policy v4 (section 9.2). Managers can approve a shorter period in writing, and that approval is recorded on the exit checklist.

Draft a job description for a senior product designer.

Drafted from your Design career ladder and the last two designer roles you posted. Ready to edit.

Illustrative exchange.

Integrations

Twelve connectors, all of them working

Identity, chat, payments and finance, wired to the same employee records. These are the connections that exist — there is no longer list behind a sales call.

Microsoft 365

Calendars, mail and file storage against the same employee record.

Microsoft Teams

Approvals and announcements delivered where your team already talks.

Azure AD

Match Albero accounts to your directory so joiners and leavers line up.

Google Workspace

Calendar, mail and Drive, connected to people and documents.

Slack

Approve leave and read announcements without leaving the channel.

Zoom

Interview and review meetings scheduled from the record they belong to.

WhatsApp Business

Reach shift and field staff who do not sit at a desk.

Razorpay

Disburse salaries and reimbursements against a completed payroll run.

Stripe

Collect subscription payments for your Albero plan.

QuickBooks

Push payroll and expense journals into your books.

SAP

Export cost-centre and headcount data into your finance system.

Oracle

Keep an enterprise ERP in step with people and cost changes.

Industries

The part of HR that is different in your sector

Most of people operations is the same everywhere. These are the bits that are not, and what the platform is configured to handle.

IT & software

Engineers spread across cities and time zones, hired fast and rarely all in one office on the same day.

Manufacturing

Rotating shift rosters and overtime rules that change by plant, with contract labour alongside permanent staff.

Healthcare

Clinical credentials expire, and a nurse whose licence lapsed cannot be on the roster the next morning.

Education

Workloads and leave follow the academic year, not the financial one, across campuses that staff differently.

Retail

A seasonal ramp that doubles headcount for eight weeks, onboarded store by store and offboarded just as fast.

Logistics

Drivers and hub staff who never sign in at a desk, with attendance that has to be captured where they are.

Finance

Every change to pay or access has to be attributable, months later, to a named person and a timestamp.

Startups

One person doing HR alongside another job, who needs the whole lifecycle to work without an implementation team.

Migration & onboarding

Three steps, and no big-bang cutover

You keep running your current process until the imported data matches what you believe is true. Nothing switches over on trust.

  1. 01

    Import your people

    Bring employees, documents, leave balances and historical payroll in from spreadsheets or an export from your current HR system. We map the columns with you and show you the result before anything is committed.

  2. 02

    Map your org structure

    Set departments, locations, reporting lines, leave policies and approval chains. The organisation chart is what drives manager scope and approvals, so this is the step worth getting right.

  3. 03

    Invite your people

    Roll out to HR and managers first, then employees. Self-service, payslips and leave go live together so nobody is asked to use two systems at once.

A straightforward migration for a company under 200 people typically takes five to ten working days end to end — most of it spent agreeing policies and checking imported data, not waiting on software. Larger or multi-entity rollouts take longer, and we will give you a dated plan before you commit.

Pricing

Per seat, per month, security included

You pay for people who are actually employed. Someone who exits stops counting at the end of the billing cycle.

Starter

Small teams putting core HR in one place for the first time.

₹399per seat / month

billed annually

Start with Starter
  • Employee management & organisation chart
  • Attendance, time and shift rosters
  • Leave management with approval chains
  • Documents and announcements
  • Employee self-service
  • Email support

Enterprise

Larger or multi-entity organisations that need a named owner on our side.

Quoted

Priced against your headcount and modules

Talk to sales
  • Everything in Growth
  • Every module, including Vision workplace analytics
  • Multi-entity structures
  • Named customer success manager
  • Guided migration and onboarding
  • Custom workflows and data model fields

Every plan includes the same security baseline: AES-256 encryption at rest, the append-only audit trail, multi-tenant isolation, enforced HTTPS and role-based access. None of it sits behind a higher tier.

Questions

Answered as we would answer them on a call

Including the ones where the honest answer is “not yet”.

Your workspace is hosted in a single region, and we confirm which region in writing before you sign. If you have a residency requirement, raise it during the security review and we will tell you plainly whether we can meet it rather than after the contract is signed.

Book a demo

See it against your own data

Book a walkthrough with someone who can answer the security questions as well as the HR ones. Tell us your headcount and we will bring a workspace set up to look like yours.

Optional — but it makes the first call a lot more useful.

A product engineering partner for ambitious teams — building software that ships fast and scales further.