Zazos

Zazos, formerly known as Rio, is a B2B company based in São Paulo, SP, Brazil, that operates in the Human Resources sub-industry. Launched in 2021, Zazos offers a no-code HR platform tailored for startups, allowing HR departments to manage tasks such as recruitment, people management, performance feedback, requests and reimbursements, knowledge management, surveys, data management, and IT department processes. The platform is customizable according to company needs without requiring access to the source code, providing flexibility and ease of use for its clients.

Zazos is part of the Y-Combinator S21 batch and serves regions including Brazil, Latin America, and remote or partly remote locations. The company employs a team of 15 and offers both a free version for testing and a freemium version with additional functionalities. It charges for platform deployment services and training or consultancy services.

The company utilizes Amazon Web Services (AWS) for hosting its production servers, databases, and support services, specifically in the sa-east-1 (São Paulo) region with a Multi-AZ configuration. Zazos employs robust security measures, including data encryption both in transit (using Transport Layer Security, TLS) and at rest (using AES-256), regular data backups, and a comprehensive security program that covers data protection, application security, infrastructure and cloud security, vulnerability management, and operational security. The company also has a Data Protection Officer (DPO) to oversee these measures.

Zazos implements a formal change management process, automated quality analysis, and maintains separate environments for development, testing, staging, and production to ensure the security and effectiveness of changes. The platform limits direct access to production resources to a small group of employees based on their roles and responsibilities and automatically blocks brute force attack attempts through request throttling and CAPTCHA for logins. The company also uses a Web Application Firewall (WAF), high availability and load balancing strategies, network segregation through Virtual Private Clouds (VPCs), and security groups to ensure minimal and secure access to its production network.

Zazos conducts regular internal audits on all systems and processes to ensure ongoing compliance with the LGPD (General Data Protection Law) and provides regular training to all team members on LGPD provisions and data protection issues. The company actively promotes awareness of the importance of data protection among its employees through meetings and educational materials.