Payroll for Organisations in Timor-Leste · How Xefe Works — Payroll an Auditor Can Follow · Pricing — One Rate, Agreed Annually · Request Access to Xefe · Accountant Access in Xefe · The Xefe Engine — Timor-Leste Payroll Law in Code · Security for Your Xefe Account · Xefe Documentation — How Timor-Leste Payroll Really Works · Getting Started — Xefe Documentation · Running Payroll — Xefe Documentation · Taxes & Statutory Filings — Xefe Documentation · Invoices, Bills & Expenses — Xefe Documentation · Attendance, Leave & Shifts — Xefe Documentation · Privacy Policy · Terms of ServiceSecurity for Your Xefe AccountHow Xefe protects company records with server-side access rules, role-based permissions, audit logs and backups.Xefe protects company records with server-side rules, role-based access and audit logs. Use a unique password and sign out on shared devices.Enforced on the server, not just the screenHiding a button is not security. Xefe's rules live in the database layer, where they cannot be talked around.

Server-side security rules — Every read and write passes company-isolation rules in the database itself. The screen is never the only gate.

Two people to finalize payroll — The person who prepares a payroll run cannot approve it — unless a business explicitly opts into solo mode. The rule is enforced in the database, not the app.

Tamper-protected billing — An owner cannot give themselves a subscription. Billing fields can only be written by the payment provider's verified webhook.

Tested before every deploy — Before anything ships, every release runs its type checks, 1,000+ automated tests and the full security-rules suite — automatically.

Stored safely, recoverable alwaysXefe runs on Google Cloud (Firebase), with your company's records isolated from every other tenant.

Encrypted in transit and at rest — All traffic is TLS-encrypted, and everything stored is encrypted at rest by Google Cloud.

Daily backups + point-in-time recovery — Automatic daily backups, with point-in-time recovery enabled so records can be restored to a precise moment.

Strict tenant isolation — Every record carries your company's identity, and the rules make cross-company access impossible. That includes XefeBot — its access is pinned to your company on the server.

An audit trail that remembers — Payroll approvals, admin actions and accounting postings are logged with who did what, and when.

Your data is yours. Export your employees, payroll history, journals and reports at any time — no lock-in, no export fee.Private things stay privateSalary data is the most sensitive thing a business holds. Xefe's defaults treat it that way.

One recipient per email — Every notification goes out individually — staff never see each other's addresses, ever.

Unguessable, revocable links — Public invoice pages use long random links that cannot be listed or enumerated — and you can kill a link at any time.

Roles that match real jobs — Owners, HR admins, accountants, managers and staff each see what their job needs. An accountant gets the books without member management; a manager sees only their department.

Payslips reach only their owner — Each employee's payslip goes to that employee — in the Ekipa app, on their own phone.