Overview

LowerPlane’s personnel management module provides a centralized view of your workforce from a security and compliance perspective. Track employee records, manage security groups and roles, run access review campaigns, assign training courses, and monitor device compliance — all integrated with your existing HR systems.

People

Employee directory with HR integration sync, status tracking, and compliance metadata.

Groups

Security groups and roles for organizing people and managing permissions.

Access Reviews

Periodic access certification campaigns for critical systems and applications.

Training

Security awareness training courses, assignments, and phishing simulation campaigns.

Devices

Staff device inventory with compliance monitoring, encryption, and MDM status tracking.

HR Integration Sync

LowerPlane integrates with 61+ HR and identity providers to automatically sync your employee directory. This eliminates manual data entry and ensures your personnel records stay current as employees join, move between roles, or leave the organization.

Supported Providers

  • BambooHR
  • Workday
  • ADP
  • Gusto
  • Rippling
  • Personio
  • HiBob
  • Namely
  • Paylocity
  • And 50+ more via unified API
HR integrations are configured in Integrations > HR Integrations. Once connected, employee data syncs automatically on a scheduled basis.

What Gets Synced

FieldDescription
NameFirst name, last name, display name
EmailWork email address
Job TitleCurrent position
DepartmentOrganizational department
Employment TypeFull-time, part-time, contractor
StatusActive, on leave, terminated
Start DateEmployment start date
ManagerReporting manager
LocationWork location

Compliance Integration

Personnel data feeds into multiple compliance areas:
  • Access reviews verify that employees have appropriate system access based on their roles
  • Training completion is tracked as evidence for security awareness controls across ISO 27001, SOC 2, and HIPAA
  • Device compliance contributes to endpoint security controls
  • Background checks support personnel security requirements
  • Offboarding records demonstrate proper access revocation for terminated employees

Personnel Statuses

Every person in the system has a status that reflects their current employment state:
StatusDescription
ActiveCurrently employed and active in the organization
On LeaveTemporarily away (parental leave, sabbatical, etc.)
TerminatedEmployment has been ended
SuspendedAccess temporarily suspended pending investigation
FormerPreviously employed, now departed
InactiveRecord exists but the person is not currently active
Not a PersonService accounts or system entries that are not actual people
Use the “Not a Person” status for service accounts and shared mailboxes that appear in HR syncs. This prevents them from being included in training assignments and access review counts.

Platform Access vs. Employee Records

LowerPlane distinguishes between two concepts:
  • Employee records — every person tracked in the personnel module, synced from HR. These people do not necessarily have login access to LowerPlane.
  • Platform users — people who have a LowerPlane account and can log in to the dashboard. Platform access is managed separately in Settings > Users & Roles.
An employee can exist in the personnel directory without being a platform user, and vice versa. This is intentional — you want to track all employees for compliance purposes, but only some need access to the GRC platform.

Key Metrics

The personnel module tracks metrics that feed into your compliance dashboards:
  • Total headcount — active employees across the organization
  • Training completion rate — percentage of assigned training courses completed
  • Access review coverage — percentage of critical systems with completed access reviews
  • Device compliance rate — percentage of registered devices meeting security requirements
  • Background check coverage — percentage of employees with current background checks

Next Steps

Set Up People Directory

Connect your HR integration and populate your employee directory.

Create Access Reviews

Define critical systems and launch access certification campaigns.

Assign Training

Create training courses and assign them to employees or groups.

Register Devices

Add employee devices and monitor their security compliance.