Security & infrastructure
No new attack surface.
No IT project.
Just WhatsApp.
Inductio runs on Cloudflare's global edge — no server to patch, no VPN to configure, no hardware to provision. New starters use an app already on their phones.
The short version
Five things IT needs to know.
- 1
No software to deploy on your estate.
- 2
No firewall rules or VPN tunnels required.
- 3
Dashboard login uses your existing SSO — Microsoft Entra, Google Workspace, or any SAML/OIDC provider.
- 4
Data stays in isolated, per-customer infrastructure at enterprise tier — your own Worker, your own database.
- 5
GDPR-compliant by design — personal data anonymised within hours of each induction run.
Infrastructure
Built on Cloudflare's global edge.
Inductio runs as a Cloudflare Worker — V8 isolates, not Node.js servers. There is no instance to spin up, no container to monitor, and no region to configure. The runtime executes at Cloudflare's nearest point of presence to your workers, and cold starts are measured in milliseconds.
At enterprise tier, each customer gets their own isolated Worker instance and their own D1 database — no shared tables, no shared connection pools, no possibility of data bleed between accounts. The bot, your data, and your retention policy live in a discrete unit that is deleted wholesale when you offboard. Offboarding is not a data-export project; it is an infrastructure deletion.
- No persistent server to patch
- No container orchestration
- No inbound ports on your network
- Cloudflare's DDoS and WAF protection included
- Runs at the edge — latency measured in milliseconds
- Offboarding is a resource deletion, not a data export
Authentication
Your identity provider.
No new accounts.
Inductio uses Cloudflare Access for dashboard login. Your IT team configures which identity provider to trust — and workers sign in with accounts they already have. No password to reset, no MFA to enrol, no user lifecycle to manage in a separate system.
Microsoft Entra / Azure AD
OIDC or SAML. Works with conditional access policies already in place.
Google Workspace
OAuth 2.0. Sign in with existing Google accounts — no separate provisioning.
Any SAML or OIDC provider
Okta, Ping, OneLogin, or any standards-compliant IdP. Configured in Cloudflare Access.
Data handling
Where your data lives.
How long it stays.
One question per worker's record. One answer: your data does not leave your instance.
Induction records
H&S answers, scores, and timestamps are stored in your D1 database. No third-party analytics platform, no data lake, no cross-customer aggregation. Your data is not readable by other Inductio customers.
Personal data window
Names and phone numbers are retained only for the duration of the induction. The nightly GDPR sweep anonymises completed runs and purges abandoned ones. Your admin team sees compliance stats, not personal data, by default.
Documents
Photos workers send — CSCS cards, licences, certificates — land in R2 storage scoped to your instance. Accessible only through your dashboard login. Deleted on DSAR request in one admin action.
What IT doesn't have to do
The IT work Inductio doesn't create.
Most induction platforms create an IT dependency before a single new starter walks through the gate. Inductio is different because it runs entirely over infrastructure your workers already have.
No MDM profile or app deployment
No kiosk hardware or network point
No VPN or split-tunnel configuration
No firewall rule for an inbound integration
No badge printer or NFC card stock
No contractor portal or supplier database to administer
Integrations & offboarding
Integrations that don't require a project.
HR webhook
POST completion records to any endpoint you own. No middleware, no iPaaS subscription, no third-party connector. Configured as a URL in your instance settings — it fires when a run completes.
Offboarding
Inductio offboarding is an infrastructure deletion. We remove the Worker, the D1 database, and the R2 bucket. No residual rows in a shared system, no data export project, no lingering credentials to revoke.
Share this page
Send this to your IT team.
This page is designed to answer the questions that land in IT's inbox during procurement. If something is missing, email us and we will add it.