# Security & Privacy Scorecard

## com.sage.mobileess

**Developer:** Sage
**Version:** 3.1.172 (build 172)
**Platform:** Android
**Scan Date:** April 7, 2026

**Security Score: 75/100** | **Privacy Score: 94/100**

## What This Means for You

Data stays largely within the app with minimal sharing to outside parties. A small set of standard libraries handles user information, and no advertising or marketing trackers were detected. Workplace data, including payroll and HR details, is not being passed to third-party ad networks.

## Recommendation: Trustworthy

**Best For:** Employees managing HR and payroll on the go

## Key Findings

**Data Security** - 4 findings (1 high, 2 medium, 1 info)

**Network Security** - 3 findings (1 high, 1 medium, 1 low)

**Code Safety** - 0 findings

**Privacy** - 2 findings (1 low, 1 info)

## Privacy Concerns

### What Data is Collected

Employment details, payroll figures, and HR records are processed locally within the app. Camera access supports document capture and QR code scanning for time-and-attendance and identity verification workflows. Usage data serves the app's core operational functions, including authentication and payroll display.

### Third-Party Data Sharing

User information is handled by a limited set of utility libraries covering image display, local data storage, and layout rendering. These components serve functional purposes only. HR and payroll data is not routed to advertising networks, data brokers, or third-party analytics platforms.

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 75/100 |
| Privacy | 94/100 |
| Data Security | 74/100 |
| Network Security | 70/100 |
| Code Safety | 94/100 |
| Data Collection | 96/100 |
| Data Sharing | 100/100 |
| User Control | 95/100 |

## Positive Security Features

- Biometric authentication protects access to the account and sensitive payroll information
- Encrypted local storage keeps HR data secured on the device
- A dedicated data protection library (Google Tink) is used to safeguard data operations
- HR and payroll data is handled exclusively by the app's core functions, with no routing to advertising or tracking ecosystems

## Areas for Improvement

- Some network connections could use stronger protections to better secure data as it travels between the device and company servers.
- Local data storage settings could be further hardened to reduce exposure on shared or lost devices.
- A small number of configuration patterns follow older practices that would benefit from modernization to align with current standards.

---

## About This Analysis

Static analysis of the app's code and configuration was used to identify security and privacy characteristics. This scorecard reflects the state of the app at the time of the scan.

### App Details

- **Package:** com.sage.mobileess
- **Version:** 3.1.172 (build 172)
- **Scan Date:** April 7, 2026
- **Platform:** Android