BambooHR Integration Security

Overview

Treat the connector as a high-sensitivity HR data system. Security is not only secret storage: it includes tenant isolation, field-level authorization, data minimization, webhook authenticity, auditability, and deletion.

Prerequisites

• The target repository or integration path and the requested operator outcome.
• The tenant, identity, and data scope only when approved live work is in scope.
• The current evidence register plus customer-specific permissions and agreements.

Current Contract

BambooHR permissions affect which employee fields and operations an identity can access. The official SDK supports secure logging and request-ID extraction, but application logs, queues, databases, exports, and support artifacts remain the operator's responsibility. Webhook creation returns a one-time private key.