People
People lists everyone you can see: yourself, your team, and anyone your roles cover. Each person’s page is their employee record. HR keeps it; managers and the person see what their roles allow.
The record
Section titled “The record”- Profile: name, title, seniority, work email, manager, and work mode. The work email is how they sign in.
- Units: their primary team and any other memberships (a practice, an office), with dates. Moves keep their history.
- Contracts: each contract and its annexes, with type, hours, and dates. A contract counts for hours, leave, and balances once it’s activated; ending one ends its annexes too.
- Compensation: pay, visible only with the View salary and cost rates permission (
compensation.view). - Personal data: JMBG, address, bank account, and emergency contact. HR only. JMBG and bank accounts are stored encrypted, and every time someone views another person’s pay or personal data, the audit log records it.
- Documents (HR add-on): signed contracts, annexes, and termination papers. PDF, Word, JPEG, or PNG, up to 10 MB, encrypted and stored with the record. Every download is audited.
- Skills (HR add-on): picked from the company’s catalog with a level. People keep their own; HR can keep anyone’s.
- Equipment (HR add-on): what they hold, with the handover form. See Joiners and leavers.
The org chart (People → Org chart) shows the same people by unit or by manager, and exports to PNG, SVG, or PDF. People → Skills shows how many people have each skill at each level.
Statuses
Section titled “Statuses”A person moves through Candidate → Onboarding → Active → Offboarding → Left, with On leave for long absences. Change status on their page moves them on:
- to Onboarding or Active, with the hire date;
- to Left, with the last working day and the reason.
Moving someone to Onboarding or Offboarding starts that checklist (HR add-on). Moving someone who left back to Onboarding is a rehire: the last day and reason are cleared.
Sign-in follows employment
Section titled “Sign-in follows employment”The day after someone’s last day, or as soon as HR marks them as left, their account is deactivated and their sessions end. A rehire gives it back. The last admin’s account always stays active.
With Google Workspace, names, departments, and managers can come from your directory every night (Enterprise add-on, Admin → Integrations). Fields that come from Google say so on the form, since a change made in Sandly would be overwritten.
When they’ve left: anonymization
Section titled “When they’ve left: anonymization”People who left are kept for the number of years set in Company settings → People who left, then anonymized by a
nightly job. HR can also do it by hand with Anonymize on their page, with the Anonymize people who have left
permission (employee.anonymize).
Anonymizing removes their name, number, contact details, personal data, pay, and documents, and closes their account for good. Their hours, leave, and contracts stay, linked to no one, so reports still add up. It can’t be undone.