Information security
NEXON is committed to the secure handling of HR and payroll data. Our operations are designed in line with the highest information security and compliance requirements.
When developing and operating our solutions, we place particular emphasis on data protection, risk management and continuous security improvements.
For more than 35 years, we have supported our clients with HR and payroll solutions designed with a strong focus on data security, information security requirements and compliance expectations.
Our compliance and certifications | Why is NEXON secure? | IT security when purchasing services
Our compliance and certifications
Our systems and processes comply with the strictest international standards and regulatory requirements.
Why is NEXON secure?
NIS2 and HR data security
HR and payroll systems handle some of a company's most sensitive data. NEXON's operations are designed to support modern cybersecurity and compliance requirements.
Access management
Role-based access and strong authentication.
Auditability
Logging and traceability across processes.
Incident management
Documented incident management processes.
Data processing in Hungary
Secure storage of client data in Hungary.
IT security starts at procurement
When you buy an HR system, you are not only buying a service – you are also buying security
HR systems process personal, payroll and organisational data, so choosing a new application, SaaS or outsourced service is not only a functional decision but also an information security decision. The right provider can reduce the risk of cyberattacks, support compliance with legal and audit requirements, and contribute to business continuity.
Secure application
Regular vulnerability assessments, security testing during development, review of new releases and controlled vulnerability management.
Protected data and access
Encrypted data storage and communication, multi-factor authentication, role-based access control and, where required, Single Sign-On integration.
Secure and continuous operation
High availability, continuous security monitoring, incident management processes, disaster recovery and controlled business continuity.
FAQ – Frequently Asked Questions
What does the NIS2 Directive mean?
NIS2 is the European Union's cybersecurity directive, setting higher security and operational requirements for organisations within its scope.
What certifications does NEXON hold?
NEXON holds ISO 27001, ISO 9001 and NIS2 certifications, and operates in line with applicable data protection and information security requirements.
Why is protecting HR data important?
HR and payroll systems process personal, employee and financial data, making their protection a critical business and compliance issue.
What should be checked when selecting an HR system or service?
Among other things, application security testing, encryption, multi-factor authentication, access management, high availability, security monitoring, incident management, and business continuity and disaster recovery processes should be reviewed.
How are incidents handled?
Incident handling is supported by documented processes designed to enable rapid response, reduce risks and securely restore affected processes.
Why is a provider's information security compliance important?
By implementing an application or service, a company also takes on information security risk. For organisations certified to ISO 27001 or subject to NIS2, assessing suppliers' security compliance is particularly important.
Do you have questions about our information security practices?
Our experts are happy to help if you would like to learn more about NEXON's information security solutions, compliance framework or the security background of our services.