Zazos
Zazos, formerly known as Rio, is a São Paulo-based B2B company offering a no-code HR platform for startups, launched in 2021. It provides a centralized solution for various HR tasks and emphasizes robust data security and customization without source code access.
Company Overview
Zazos, formerly known as Rio, is a B2B startup in the Human Resources sub-industry. Located in São Paulo, Brazil, and serving regions including Brazil, Latin America, and remote areas, Zazos launched in 2021. The company was part of the Y-Combinator S21 batch and employs a team of 15 members. Zazos offers a no-code HR platform that provides centralized management for HR tasks, including recruitment, people management, performance feedback, requests and reimbursements, knowledge management, surveys, data management, and IT department processes.
Services
Zazos offers a variety of HR solutions designed to optimize and streamline HR tasks. These services include recruitment management, people management, performance feedback, handling requests and reimbursements, knowledge management, surveys, data management, and IT department processes. The platform is customizable to meet company needs without necessitating access to the source code. Zazos utilizes Amazon Web Services (AWS) for hosting, ensuring a secure and reliable environment for its clients. The company also offers a free testing version and a freemium version while charging for deployment, training, and consultancy services.
Security Measures
Zazos prioritizes data security through comprehensive measures. The company employs data encryption both in transit using TLS and at rest using AES-256. Regular backups are conducted daily, weekly, and monthly. Security protocols include a Web Application Firewall (WAF), transport layer security, load balancing, and high availability strategies. The production environment is hosted in the sa-east-1 (São Paulo) region using a Multi-AZ configuration. Zazos also implements application security measures such as change management, separate environments for development, testing, and production, and access controls restricted based on role and responsibility.
Data Protection Program
Zazos has a comprehensive data protection program that includes infrastructure and cloud security, application security, vulnerability management, operational security, and a Data Protection Officer (DPO). Network segregation is maintained through Virtual Private Clouds (VPCs) and security groups. The company regularly conducts internal audits to ensure compliance with LGPD and give employees regular training on data protection issues. Zazos actively promotes awareness of data protection importance among employees through meetings and educational materials.
Infrastructure and Hosting
Zazos utilizes Amazon Web Services (AWS) for hosting its production servers, databases, and support services. The infrastructure ensures high availability and load balancing through AWS's Multi-AZ (multiple availability zones) configuration. The production network is segregated using Virtual Private Clouds (VPCs) and security groups, minimizing and securing access. An Audit Trail records access activities to the AWS account, enhancing transparency and control over data usage and system interactions.