Solution · Enterprise

HRMS that scales across business units, geographies, and ERPs.

A 3-tier payroll approval workflow on the HRMS, schema-per-tenant isolation on the ATS, deep India statutory compliance, and comprehensive audit logging. Built for organisations that need governance and audit history.

Per-company isolation, single tenant

Run multiple companies on a shared HRMS deployment.

All major HRMS models are scoped to a Company foreign key, with HorillaCompanyManager as the default queryset filter and CompanyMiddleware injecting the company context per request. Per-company branding via the horilla_theme app: logo, colours, favicon. The ATS uses stronger schema-per-tenant PostgreSQL isolation addressed by subdomain.

  • Per-company filtering everywhere. Default manager + middleware. Models scoped to a Company FK so the same HRMS deployment can host multiple legal entities.
  • Per-company branding. Logo, colours, favicon per organisation through horilla_theme. Light / dark toggle.
  • Self-hosted via Docker available. docker-compose with web + Postgres + Redis. Production profile with nginx. Open-source LGPL-2.1 core.
  • Honest about isolation depth. The HRMS is row-level filtering by Company FK; the ATS is schema-per-tenant. We will surface the difference during your security review.

Multi-currency payroll, automated inter-entity transfer flow with statutory closure / opening, and group consolidation dashboards across entities are not in current release; payroll runs at single-currency per structure.

See payroll
Tenancy · multi-company
Per-company isolation
HRMS + ATS
HRMS isolation
Row-level by Company FK
ATS isolation
Schema-per-tenant
SSO
Microsoft 365 (live)
Branding
Per organisation
Self-hosted
Docker available
SAML / SCIM
Roadmap
Identity · today
Live SSO surface
Auth
Microsoft 365 SSO
Live (HRMS + ATS)
Google OAuth
Live (ATS)
JWT API auth
Live · 24h access TTL
TOTP MFA (ATS)
Live
2FA (HRMS)
Roadmap (Q3)
SAML 2.0 / SCIM 2.0
Roadmap (Q3 / Q4)
Identity, in plain language

Microsoft 365 SSO + Google OAuth + JWT today.

For staff sign-in, Microsoft 365 (Entra ID) SSO is live across the HRMS and ATS, with auto-create flag and email-domain allowlist on the SSO settings. The ATS adds Google OAuth and TOTP MFA. The HRMS uses JWT for API authentication with a 24-hour access token and a 30-day refresh token.

  • Microsoft 365 SSO. OAuth-based. Auto-create employees on first login. Email-domain allowlist.
  • RBAC on the HRMS. Django Group + Permission. Custom decorators. Per-module workflow roles (payroll: HR / Finance / CEO; performance: 7 default).
  • Custom roles on the ATS. Granular permission matrix per organisation, with an AI Role Assistant that generates a permission set from a job description. 424 endpoints all permission-gated.
  • SAML / SCIM on the roadmap. Today we won't claim Okta / Azure AD via SAML, JumpCloud, OneLogin, PingIdentity, or SCIM 2.0 lifecycle. Quarter targets are Q3 / Q4.
See trust center
Governance and audit

Field-level audit logs, retained 7-10 years.

Every change to compensation, role, access, or sensitive data captured with who, when, why. Aligned with the controls expected by SOC 2 and ISO 27001 audits, both of which we are working toward.

  • Quarterly access reviews. Automated workflow. Managers attest to their team's permissions every 90 days.
  • Audit retention 7-10 years. Configurable for regulated industries. Cryptographically signed exports.
  • Public sub-processor list. 30-day notice for changes. Right to object before takes effect.
  • Data handling. Custom deployment options and key management discussed during procurement.
See trust center
Audit · this month
84,332 events logged
7-year retention
Field-level edits
12,840
Permission changes
84
Bulk exports (logged)
12
Off-hours admin access
3 (approved)
SOC 2 / ISO 27001
In progress
Quarterly access review
Due in 18 days
Live integrations

A short list, told honestly.

These are the integrations live in current release. Everything else, including SAML, SCIM, Workday, SAP, Oracle and NetSuite, lives on the roadmap or runs through Excel exchange today.

Microsoft 365 SSO

Live. OAuth-based against Entra ID. Auto-create flag, email-domain allowlist.

Security details

Microsoft Teams + WhatsApp

Teams Adaptive Cards via webhook with action callbacks. WhatsApp Business via Meta Graph API.

Talk to sales

Google Meet + Drive

Meet credentials per company for video. Service-account-based Google Drive backup of database and media.

Security details

LinkedIn / Naukri / Indeed

OAuth and API-key job posting on the ATS. Embeddable career widget for your own site.

See ATS

REST API + JWT

Endpoints across employee, attendance, leave, payroll, asset and notifications. Swagger / OpenAPI docs via drf-yasg.

See API docs

What's on the roadmap

SAML / SCIM, Slack, Workday, SAP, Oracle Fusion, NetSuite, outgoing webhooks, Tally / Zoho / QuickBooks JE export, NEFT bank-file generation.

See trust center

Why enterprise teams choose pPULSE

Scale, governance, and an India that's first-class, not a localisation.

3-tier payroll governance
HR submits, Finance reviews, CEO approves. Role-enforcing middleware and a complete audit history per cycle.
Compliance roadmap
SOC 2 Type II in progress, ISO 27001 in scoping, DPDP Act readiness review ongoing. Sub-processor list available on request.
India-deepest payroll
Ten dedicated India tax models. Old / new TDS regime per filing status, professional tax routed by state, PF, ESI, section 80C, labour welfare fund.
Comprehensive audit trail
django-auditlog + django-simple-history across all HorillaModel-derived rows. Custom AuditTag for categorisation. ATS adds threat-level rollups (LOW / MEDIUM / HIGH).
Self-hosted Docker option
docker-compose with web + Postgres + Redis. Production profile with nginx. Open-source LGPL-2.1 core (forked from Horilla v2.0). Honest about LGPL obligations.
Dedicated success manager
Named expert, quarterly business reviews. Communications via existing channels (email, Microsoft Teams, WhatsApp), no Slack today.
Frequently asked

Questions about Enterprise.

Implementation timing depends on scope. A typical multi-company HRMS deployment with payroll, attendance and a Microsoft 365 SSO integration takes 8-10 weeks from kickoff to go-live, including data migration via Excel, role configuration, and manager training. SAML / SCIM and ERP integrations are not in current release, so they don't extend timing today.
Custom deployment scenarios are discussed during procurement and tailored to your security review. Mention your specific isolation, region, and key-management requirements when you reach out and we will scope a fit.
Live today: Microsoft 365 (Entra ID) SSO, Microsoft Teams, WhatsApp Business via Meta, Google Meet, Google Drive backup, Outlook OAuth, Anthropic Claude. Plus LinkedIn, Naukri and Indeed for the ATS. Workday, SAP, Oracle Fusion, NetSuite, Microsoft Dynamics, Okta SAML, JumpCloud, OneLogin, PingIdentity, Slack and Zapier are on the roadmap. We won't claim them until they ship.
Yes. We have a standard MSA, DPA, and SLA template, but we negotiate. Most enterprise customers add custom indemnification, data localisation guarantees, and exit-assistance clauses.
Yes. Many enterprise customers run a parallel month or quarter before fully cutting over. We provide comparison reports showing the differences in computed amounts, useful for catching configuration mistakes early.
Full data export in CSV + JSON within 24 hours of request, no exit fees. We also help you migrate to your next system if it ever comes to that.

Ready to get started?

Start a free 14 day trial in minutes, or chat with us about a custom rollout for your team.

See what you'll pay

Clear per person pricing. No surprise setup or onboarding fees.

Pricing details

Book a demo

A 30 minute walkthrough, tailored to how your team actually works.

Schedule a demo