What this helps you do
DirectToEmployees is a notice channel, not an employee record. It needs an email address, a name, and the audiences a person at your company put someone in. It does not need, and must never be used for, pay or salary, medical information, benefit selections or eligibility, disciplinary information, performance reviews or evaluations, immigration or work authorization, background checks, protected leave, timeclock or attendance data, Social Security numbers or any employee or government ID number.
When to use it
Read this before your first import, before you write a staff note, and before you write any notice that concerns one person rather than an audience.
How to do it
- Export only email, name and an audiences column. The Hub discards every other column and every other webhook field before anything is saved, but don't send it in the first place.
- Keep notices about the workday and the company, never about one employee's pay, health, leave, performance or status.
- Keep staff notes to what the communication needs, like 'prefers the site lead as contact'. Never record sensitive information there.
- Don't import birthdays or hire dates. The preferences page doesn't ask for them either.
- Leave confidential matters to the systems and people responsible for them.
Example
HR exports the whole employee file from the HRIS, including pay rates and leave balances, and starts to upload it. The preview shows those columns as not stored, and HR re-exports just email, name and audiences instead.
Good to know
- This guidance is how the channel is meant to be used. It makes no HIPAA, GDPR, labour-law, OSHA or other legal-compliance claim; check your own obligations with your counsel.
- Connecting on Blasts is the employee's own choice, on a device they choose. The company sees that a person is connected, never their device, their location or their notification settings.