Public notice
This page explains the current Sloth HR demonstration and evaluation data-handling position. It is intentionally clear about what is not yet a final customer privacy contract.
Last updated: 18 August 2026
Sloth HR is currently operating as a controlled demonstration and evaluation product. Public self-service registration is not offered through the Sloth HR website.
The current environment should be treated as a demo/evaluation environment. Do not upload live employee, payroll, health, disciplinary or other sensitive personal information unless your organisation has entered into an appropriate written agreement and data-processing terms with the Sloth HR operator.
For invited evaluation accounts, Sloth HR may process account identifiers, role and company membership, employee records, attendance, leave, timesheets, payroll data, documents, performance information, HR case information and audit events where those features are used.
The public website may also receive ordinary technical request information from the hosting platform, such as IP address, browser information, timestamps and security logs needed to deliver and protect the service.
Information is used to authenticate authorised users, enforce role and company boundaries, provide requested HR features, generate reports, maintain audit trails, protect the platform and support troubleshooting and evaluation.
Sloth AI and Legal AI may process information supplied to them in order to retrieve relevant records, explain information or prepare a proposed next step. Sensitive HR or payroll actions are designed to remain subject to authorised human review and approval.
Sloth HR uses Supabase for authentication and backend services and Vercel for web application hosting. Access to the application is role-aware and company-scoped, with database row-level security and additional server-side access controls.
Passwords should never be shared with Sloth HR support, demo contacts or other users. Multi-factor authentication may be required for privileged actions and accounts.
Data may be processed by infrastructure providers that are necessary to operate the service, including the hosting, database, authentication and security providers used by Sloth HR.
Sloth HR does not state or imply that customer or employee data is sold to advertisers. Additional subprocessors, contractual safeguards and international-transfer terms must be confirmed in the customer documentation before live customer data is onboarded.
Demo and evaluation information may be removed, refreshed or reset as the product is tested. Retention periods for live customer data have not been represented on this page as a final customer retention schedule.
For an invited evaluation account, requests relating to access, correction or deletion should be raised through the organisation or Sloth HR representative who provided the account. Formal customer rights-handling and controller/processor responsibilities will be documented before production onboarding.
Authenticated Sloth HR sessions may use cookies and browser storage that are necessary for authentication, security and workspace state. The current product does not intentionally use the authenticated HR application to build advertising profiles.
This notice describes the current demonstration/evaluation stage. Before Sloth HR is used by a customer with real workforce information, the final contracting entity, privacy roles, lawful processing instructions, retention schedule, subprocessors, security commitments and data-processing agreement should be confirmed in signed customer documentation.