Question 1

How do we get set up — and do we need a security team to run it?

Accepted Answer

There’s nothing for you to install and no security team required. We provision a dedicated, single-tenant instance for you and host it, and we walk you through connecting your tools every step of the way — guided setup, not a project you have to staff. Your instance is ready within one business day (Sunday to Thursday) of you sending us your setup details (the short form after payment). If we miss that, tell us and we refund your first payment in full. Day to day it’s built to be run by a normal IT or ops person: every plan includes the System Health console — a read-only view of your server’s CPU, memory, disk and service status — and from the Advanced plan up the built-in Security Lab self-audit checks your setup for gaps and tells you exactly what to fix.

Still have a question we didn’t cover?

The founder replies personally, usually within one business day.

Question 2

Is my data isolated from other customers — and can we delete what we want?

Accepted Answer

Yes. Your instance runs on a private, single-tenant server that runs only your instance — no other customer is ever provisioned onto it. Every account, employee record, candidate record, and access log lives on your own instance, never co-mingled with another customer and never stored on multi-tenant SaaS servers. (The one shared service is Apple MDM, and only if you use it; the Trust Center says exactly what it holds.) Deletion is your call: you can remove a record, or a whole closed requisition, whenever you decide to. We don’t impose a retention period on you: by default nothing is purged automatically. For candidate records an administrator can switch on a retention policy that automatically purges every non-hired candidate with no activity for the number of months you choose; a configurable minimum-retention floor (12 months by default, 24 with the federal-contractor setting) stops the sweep deleting anything younger than that. Employee records are not swept unless you switch that on too: HR can set a number of months after which the sensitive parts of a leaver’s file are removed. Which schedule your jurisdiction requires is your decision to make.

Question 3

How does the AI engine work? Does it send our data to an outside AI service?

Accepted Answer

No. All AI processing runs locally on your dedicated instance using an on-box local LLM that never calls external AI APIs. Your company directories, access logs, and policies stay on your instance, are never pooled with other customers, and are never used to train external models.

Question 4

Does it help with SOC 2 or HITRUST audits — and has Zonitix itself been audited?

Accepted Answer

It helps with yours: every access grant and removal is recorded automatically to a tamper-evident audit trail — hash-chained in the database, anchored daily to a checkpoint that is shipped off the server once your backup bucket is connected, and verifiable in one click (a green/red integrity check plus an auditor export), so the audits you face each year are already documented and provable, with no last-minute scramble over who had access to what. This audit trail is baseline on every tier. On Advanced, the Compliance Hub maps 146 controls across eight frameworks — SOC 2 Type II, ISO/IEC 27001, HITRUST CSF, HIPAA Security Rule, PCI DSS v4.0, GDPR, CCPA/CPRA and NIST CSF 2.0 — harvesting evidence continuously on a background scheduler and scoring readiness honestly (un-instrumented controls are labelled Manual, never assumed to pass). The same hub keeps your policy register, a risk register, a vendor register and an exportable Statement of Applicability. Policy signing and training themselves start on Team; on Advanced the hub counts those signatures and completions as evidence for the controls that ask for them. As for the platform itself — not yet formally. We’re an early-stage, independent company and we don’t claim third-party attestations we don’t hold. What we do provide: because your instance is completely private, your security team can run vulnerability assessments against it whenever they want, and, from the Advanced plan up, the built-in Security Lab probes it on demand or on a schedule you set — injection (SQLi, XSS), BOLA/IDOR, authentication and authorisation checks, TLS, email authentication (SPF/DKIM/DMARC), cloud posture and open ports — and adds CVE and CISA KEV exposure, SBOM scanning, approval-gated exceptions for accepted risks and ticket hand-off to Jira or ServiceNow. It is a self-audit, not a penetration test.

Question 5

What does it connect to — and can we enforce SSO for admin logins?

Accepted Answer

Sixteen named tools where Zonitix grants and removes the access itself: Okta, Microsoft Entra, Google Workspace, AWS IAM, Active Directory / LDAP, OpenLDAP, Slack, GitHub, Jira, Zoom, Salesforce, BambooHR, 1Password, Zendesk, ServiceNow and Dropbox — plus a generic SCIM 2.0 connector that provisions and deactivates accounts on any app that speaks SCIM 2.0: you point it at the app’s SCIM base URL and bearer token, one hook per app. Offboarding disables or suspends the account rather than deleting it (AWS IAM is the exception: the IAM user is removed), and if a call fails the step becomes a written task instead of a silent gap. A smaller set it reads from — Azure and Google Cloud resources, and Notion’s member list — so you can see who has what; removing access there is a manual step. Jamf Pro and Microsoft Intune are read-only too: Zonitix pulls device-compliance and disk-encryption evidence from them for the Compliance Hub, and does not manage devices through them. Connectors are not limited by plan. Offer letters are signed on your instance with Zonitix Sign, our own built-in e-signature engine that runs inside your own isolated deployment and cryptographically seals each signed PDF — no separate e-signature subscription (part of HR & Talent, on Team and up). We add connectors as we build them, and we’ll tell you plainly if the one you need isn’t there yet. On SSO, yes: sign-in to Zonitix supports OIDC and SAML 2.0 with one identity provider per instance, alongside WebAuthn passkeys (FaceID, TouchID, YubiKey) and TOTP multi-factor. Your IdP can also push users and groups to Zonitix over inbound SCIM 2.0.

Question 6

Who keeps it running — and what if the server is lost?

Accepted Answer

We host and monitor your server; your administrator applies updates and runs backups and restores. We do not log in to your server unless you ask us to. Updates: we publish each Zonitix release and each server security patch, and an administrator applies them from System → Updates — releases by hand, security patches by hand or on a schedule you set. Backups: a nightly and a larger weekly database backup run on their own, and once you connect a storage bucket you own they are copied off the server too. On every plan, restores are self-serve: the restore tooling is built into your instance (one administrator requests a restore and a second approves it), and it restores any backup that is still on your server. Zonitix does not perform restores for you on any plan. A backup that now exists only in your bucket, a point-in-time recovery and a restore after a lost server cannot be done from that screen today. If the server itself is lost, we provision a replacement server; there is no in-product way yet to load your bucket copy onto it, so today that case is not covered. We publish no guaranteed recovery time. The Trust Center has the full detail.

Question 7

We already have a directory (Okta, Entra, Google, or an HR platform). How do we bring our people over?

Accepted Answer

If you use Okta, Microsoft Entra, Google Workspace, Active Directory / LDAP or BambooHR, you connect it and Zonitix imports your people over its API — user accounts, plus group memberships from the directories, giving you a baseline to build on. Any other identity provider that can push SCIM 2.0 can provision users and groups into Zonitix directly. Where neither applies, a CSV import loads your people from a spreadsheet. If your HR or identity system is not one of those and you plan to push from it over SCIM, talk to us before you plan around it — we have only tested the sources named here.

Question 8

Does this replace our HR system or work alongside it?

Accepted Answer

Either, within limits. From the Team plan, Zonitix keeps employee records itself: employment details, job and pay history (as a record), time off with manager approval and a who’s-out calendar, employee documents, goals and performance reviews, training courses your people take in the app, policies they read and sign, anonymous staff surveys, people reports, and a hand-off file for whoever runs your payroll. If you already run an HR system, you choose field by field which system owns the data; today BambooHR is the one HR system Zonitix reads from automatically, and from any other, HR enters the data by hand. What it is not: payroll (nothing is calculated or paid), benefits, or a catalogue of third-party courses. Your payroll and benefits provider stays where it is.

Question 9

How does the AI screening avoid bias — and who makes the decision?

Accepted Answer

Resumes are anonymized first, then scored against the job’s requirements, and a person on your team decides who advances. It’s a shortlist tool, not a filter that rejects people for you.

Question 10

What does it cost?

Accepted Answer

Straightforward plans, billed per instance rather than per seat: Core $299, Team $649, Advanced $1,799 a month — or annually for the price of ten months (two months free). Plans are paid by invoice and bank transfer. Each is a dedicated instance we host for you, with no per-seat fees and no headcount limit, so hiring never changes your bill. Custom integrations, onboarding help or your own contract terms are quoted separately. Book a quick demo and we’ll help you pick the right tier.

Advanced

Need something custom?

Answers before you ask.

Before you buy.

2. Evaluation

3. Billing & cancellation

11. Data retention, export & deletion

Flat monthly prices. No per-person fees.