In today’s fast-paced business environment, it’s important for small organizations such as Numino to increasingly adopt digital transformation initiatives to enhance productivity & reduce operational costs.
In one such case, leave management at Numino was handled manually via email requests and spreadsheets. Employees had no visibility into their leave balances and had to rely on the admin to provide updates. Similarly, the leave request process was cumbersome, involving back-and-forth email exchanges for approvals and adjustments.
This manual process created significant overhead for the admin, who was responsible for tracking outstanding leave balances, reconciling credits, and processing cancellations. As the team expanded, the limitations of this system became evident, making it difficult to ensure accuracy and efficiency.
To address these challenges, Numino recognized the need for a streamlined and automated leave management system. The solution had to be intuitive for employees while reducing the administrative burden, enabling both transparency and efficiency in leave management.
The Leave Management system implements an event-driven architecture for the notification service, utilizing Amazon SQS and AWS Lambda to ensure scalable and asynchronous processing of notification events.
The Leave Management System is designed with a strong emphasis on security and compliance, ensuring that sensitive employee data and workflows are well-protected. Key measures include:
Application access is enabled through Google Authentication, integrated with Numino's in-house identity system. Only registered users within the organization’s domain are authorized to access the application, ensuring that external users are restricted.
The admin portal provides tight control over user onboarding and role allocation, ensuring that access levels are managed effectively and logged for compliance.
All API endpoints are secured through tokens generated by Numino's Identity Management Service (IDM). This ensures that only authenticated and authorized requests are processed by the system. The level of access for each api are also controlled through groups in IDM. For instance, employees can view their own leave but cannot view the leaves of other employees, managers on the other hand have access to view their own leaves in addition to viewing & approving the leaves of their reportees.
Access to application data is tightly controlled through a dedicated service account, minimizing exposure and ensuring compliance with data protection policies.
Leave approvals via email are secured through Google Authentication, ensuring that only authorized personnel can approve or reject requests. You can read more about Email approval in workflow here.
Administrators can generate comprehensive reports on leave trends and utilization, enabling better workforce planning. This case study talks about how we used Quicksight for Reports and Data insights generations.
