Explanation
How ASHR.work actually works under the hood — tenancy, roles, the payroll engine, leave accrual.
Background reading, not instructions. These pages describe the model behind the screens — useful before you configure something you cannot easily undo.
How tenancy and roles work
Why one organisation can never see another's data, how a person's tenant is resolved from their session, and how the base roles combine with additive grants like finance and recruiter.
~8 min read
What is multi-tenancy in ASHR.work?
Many companies share one ASHR.work app, but each is a sealed space that only ever sees its own data.
~3 min read
How is my company's data kept private and separate?
Every record is tagged with your organisation and the database itself blocks any query from returning another company's data.
~3 min read
How the payroll engine models pay
What happens between an annual CTC and a locked payslip — the derivation order, the statutory rates, the run state machine, and the things the engine deliberately does not decide for you.
~9 min read
How leave accrual and balances work
Where a leave balance comes from — monthly earned-leave accrual, prorated sick leave, the carry-forward cap, and why a pending request already costs you days.
~7 min read
The public API and agent surfaces
Why the API is anonymous-first, how keys and scopes are shaped, what writes are allowed today, and which surfaces exist specifically so AI agents and crawlers can read the product.
~8 min read