A clean directory plus joiner–mover–leaver flows that provision and revoke access across the entire suite. When someone leaves, the kill-switch closes every door in one click — and logs it.
Roles, teams, reporting lines and contact details — the single source for who’s who.
Provision access on day one, adjust on role change, revoke on exit — automatically.
One action revokes access across CRM, Mail, files and AI — fully audited.
One directory record drives access from the first day to the last — no separate spreadsheet, no forgotten step.
Add the person once. Their directory record — role, team, reporting line — provisions the right access across CRM, Mail, files and AI from day one. No copy-pasting credentials between tools.
When someone changes role or team, update the record and access follows. Field-level RBAC means a promotion opens what it should and closes what it shouldn’t — not a manual re-grant exercise.
Mark the person a leaver and the kill-switch logically revokes their data access across the whole suite in one action — and writes it to the audit trail. The door closes the moment it should, not whenever someone gets round to it.
Because access is governed centrally, leaver flows aren’t a checklist someone forgets — they’re enforced by the platform and recorded in the audit ledger. Sensitive employee fields are masked by role.
See the Control Center →Provision & revoke from one place, suite-wide.
Salary & personal data visible only to the right roles.
Every revocation logged with who, what and when.
The same patent-pending firewall that keeps out-of-scope data out of every answer also draws the line a leaver can no longer cross.
Other Me is built on SCRS, our patent-pending pre-retrieval firewall (UK App 2602911.6). Permissions are enforced during retrieval, so out-of-scope data is removed before results even exist — fail-closed, meaning any failure returns nothing.
A standalone HR app knows your people. It doesn’t know what they can touch. Ours does.
| What you need | HR-lite in Other Me | Bolt-on HR tool |
|---|---|---|
| People directory | Roles, teams, reporting lines, contacts | Yes |
| Provision access on joining | Suite-wide from the directory record | Separate admin per app |
| Offboarding revokes access | One-click kill-switch, suite-wide | Manual checklist per system |
| Sensitive-field protection | Field-level RBAC + SCRS tokenisation | Varies; often plaintext |
| Exit logged for audit | Written to the platform audit trail | Outside the workspace |
| Cost for CRM customers | Free, no extra per-seat charge | Separate subscription |
HR-lite is a focused people-and-access module, not a full HRIS. It does the joiner–mover–leaver basics — well, and governed.
If you run CRM on Other Me, HR-lite comes with it — people, access and offboarding in the same governed workspace, with no separate per-seat charge to add. Your directory becomes the control point for who can reach what.
HR-lite is included at no extra per-seat cost for CRM customers — people, access and offboarding in the same governed workspace.
See what’s included →