Helix by Kryshara

The pharma-first HR and compliance suite.

HR, payroll, attendance, recruitment, privacy, employee health and GxP compliance in one platform. Built for regulated pharma manufacturing, deployed on your own infrastructure.

Book a demo See what it does

Helix pharma operations cockpit showing area access, SOP training and qualification gaps

The problem

Generic HR suites weren't built for the plant floor

What a general-purpose HR suite gives you

Core HR, leave and payroll for office workforces
A cloud-first, packaged operating model
Generic approval workflows, standard letters and reports
Privacy and integrations treated as admin setup, not workflow controls

Good for IT services. Not enough for a GMP site.

What a pharma site actually has to prove

Every operator qualified, trained and medically fit for the area they entered
Controlled-area access that expires and auto-suspends, with evidence
Schedule M and WHO-GMP training evidence, with Part 11 and Annex 11 controls where applicable
DPDP purpose, masking, retention and rights evidence for identity, health, biometric and payroll data
Labour Codes, POSH, CLRA, OSH, contractor and factory registers, inspection-ready
Data that stays inside the plant: on-premise, not someone else's cloud

Pharma-first, not retrofitted

GMP and GxP, the qualification matrix, controlled-area access and medical fitness live in the data model. They are not bolted on as custom fields.

The full HR suite

Core HR, recruitment, time and attendance, leave, payroll, expenses, performance, help desk and employee relations. Everything a modern HR suite is expected to do.

Privacy-first and tenant-isolated

Runs in your data centre on PostgreSQL. Purpose capture, masking, retention, role-based access and audit are part of the operating model.

No-code and customer-owned

Fields, workflows, policies, letters, dashboards and reports are configured by your admins, not by a vendor ticket.

The compliance moat

HR that is also a compliance system of record

The question a pharma site has to answer is simple: was this person allowed to do this work, in this area, on that day? Helix answers it from live records, not spreadsheets.

GMP & Quality · GxP passportPharma moat

Every operator carries a GxP passport

Per-employee GMP, SOP, area-access, gowning, medical and substance-handling status in one place
A live eligibility decision: can this person enter this area, today?
Badges turn red on expiry and amber within 30 days, with evidence linked from object storage
Blockers and warnings surface before access is ever granted

Employee compliance tab with GxP passport and eligibility decision

GMP & Quality · Qualification matrixPharma moat

Who is allowed to do what, as configuration

Role × site × area × SOP × GMP × course requirements, published, versioned and effective-dated
Targets resolve to employees automatically, with no manual lists
Unmet rules that training can fulfil auto-assign, with retrain-before-expiry dates
A gap board shows who is blocked from which controlled area right now

Qualification matrix configuration screen

GMP & Quality · Training and assessmentsPharma moat

Prove competence, not just attendance

SOP, GMP, safety and role-qualification courses with due dates, completion evidence and expiry
Read-and-understood acknowledgements captured with an electronic signature
Versioned GxP assessments with pass scores, attempt limits, remediation and a QA approval chain
A governed question bank with item analysis that flags questions that are too hard or too easy

GxP assessments list with versions and pass criteria

GMP & Quality · Compliance dashboardPharma moat

An expiry heatmap you can act on

Tenant-wide GMP, gowning, medical, substance and area-access posture
7, 15 and 30-day expiry horizons by record type
Counts derive from today's date, independent of when background jobs last ran
Drill straight into the at-risk employee's compliance tab

Pharma compliance dashboard with expiry horizons by record type

GMP & Quality · Deviation and CAPAPharma moat

CAPA training closure that feeds the HR record

Consumes deviation and CAPA events from your QMS or from a controlled GxP form workflow
A CAPA marked as requiring training auto-enrols the impacted roles into SOP courses
Effectiveness checks and retraining evidence land on the employee's GxP passport
Closure evidence is reason-coded, e-signed and available in the audit pack

CAPA register linked to training actions

GMP & Quality · Audit packPharma moat

Inspection evidence in one export

Assemble an employee's or an area's evidence for any date range
Entitlements, training, e-signatures and the full audit trail, in PDF, XLSX or CSV
Scope by legal entity, work location, state or EHS register
The pack is itself an audit record of who exported what, and when

How the moat works

Access is a lifecycle the system enforces, not a spreadsheet

01
Qualify
GMP level, gowning, medical fitness
02
Train
SOP read and assessment, evidence captured
03
Grant access
Area-access entitlement with an expiry date
04
Monitor
Daily scan of 7, 15 and 30-day expiry horizons
05
Auto-suspend
Access revoked on expiry, reason-coded
06
Re-qualify
Retraining auto-enrolled, and the loop repeats

Background jobs drive expiry and auto-suspension, so there is no manual clean-up. Every grant, suspension and re-qualification is reason-coded and audited.

People

People, organisation and documents

An employee master with real depth, and an organisation model that knows which locations are GMP areas.

People · Employee master

A tabbed profile with effective-dated history

Sixteen addressable tabs: personal, job, statutory, family, education, bank, compliance and more
Append-only job and compensation history with reason codes and as-of-date queries
Day-one readiness checks and lifecycle actions: confirm, transfer, promote, resign
Aadhaar and PAN are envelope-encrypted, always masked, and every decrypt is audited

helix · on-premise

People · Organisation and sites

Sites that know they are GMP areas

Site, plant, block, line, lab and warehouse hierarchy
Each location carries its GMP area class (A, B, C or D) and gowning requirement
Position management: every seat is a first-class object with headcount, FTE and vacancy status
The foundation that controlled-area access is enforced against

Organisation locations with GMP area classification

People · Document Studio

Letters and certificates, generated and versioned

One studio for offer, appointment, transfer and relieving letters, and payslips
Versioned templates with preview and publish workflow; PDF and DOCX generated to object storage
Acknowledgement campaigns track who has read and signed
Reminder jobs nudge before licences, GMP inductions and certificates expire

Hire & onboard

Hire and onboard, with readiness gates

From a budgeted position to a joined employee with the right area access, in one chain of records.

Talent · Recruitment

A recruitment pipeline inside the HR system, not a light tracker

Manpower position to requisition, posting, candidate, interviews, offer and onboarding
Budget-backed headcount plans with CTC, statutory, recruitment and training cost lines
Background verification: employment, education, address, drug screen and pre-employment medical
Offer acceptance can trigger identity, medical and GMP readiness gates before joining

Recruitment hub with requisitions and candidate pipeline

Talent · Onboarding

Joining that provisions the right access

Configurable joining checklists by employment type, with pre-joining and post-joining tasks
Confirm-joining creates the employee from the candidate and offer records
Auto-provisions controlled-area access when the requisition declares a zone
Exit is covered too: notice period, clearance, full-and-final settlement and relieving letters

Time & leave

Time, shifts and leave for a continuous-process plant

Biometric attendance, crews and rotating rosters, with competency and statutory limits checked where the roster is made.

Time · Attendance and rosters

Biometric attendance, pharma shifts, competency-gated deployment

Daily records from biometric devices across day, night and rotating shifts
Crews, roster cycles and a deployment board that shows whether the competency gate cleared each person
Statutory limits on daily and weekly hours, spread-over, rest gaps and night work, configured by state
Locked-period guards stop edits after payroll close

Daily attendance records with shifts and exceptions

Time · Leave

Leave that runs a real policy engine

Every application shows warnings, blockers, and document or medical gates
Sandwich, clubbing, probation, notice-period and loss-of-pay rules all evaluate
Continuous-process roles require acknowledged, qualified coverage before leave is approved
Approved loss-of-pay and encashment post straight to payroll

Payroll

Indian statutory payroll, state by state

A formula-driven payroll with the statutory outputs, bank files and close controls an Indian manufacturing employer needs.

Payroll · Structures

Versioned CTC structures with a formula engine

Effective-dated salary structures with eligibility and component rules
Cross-component formulas resolved by dependency graph
Flexible benefit plans, reimbursements, loans, ESOPs and arrears
Pharma pay levers: shift differentials, GMP-qualification bonuses and production incentives

Salary structure configuration with components

Payroll · Statutory

PF, ESI, PT, TDS and the files that go with them

PF, ESI, professional tax, TDS, gratuity, bonus and LWF rules, versioned and effective-dated
Form 24Q, Form 16, PF ECR, ESI workbooks and PT challans generated to file
Old and new tax regime engine with declarations and a regime simulator
Bank transfer files for major Indian banks, with response files reconciled to paid and failed rows
Labour Code transition rules applied by notification date, previewed before publish

Statutory & EHS

The registers a regulator asks for

Factory, labour and drug-licence obligations tracked as records with owners and due dates.

Statutory & EHS

Labour registers, safety and occupational health in the same system

POSH, CLRA contractor and contract-labour registers, Factories Act accident register and gate logs
Statutory appointments: the competent technical staff named on a drug licence, the safety officer, the welfare officer and certified first-aiders, with alerts when a named person resigns
Permit-to-work for confined space, hot work, electrical isolation and work at height
Occupational health: pre-employment, periodic and exposure medicals, where an expired fitness verdict removes plant access
PPE entitlement and issue, risk assessment (HIRA), safety committees and a compliance calendar

Self-service

Self-service for everyone on the site

An employee portal, a manager workspace and a mobile app, so compliance tasks reach the person who has to do them. Each tenant brands the portal as its own.

Employee self-service overview: roster, attendance, pay and priority tasks

The employee portal on desktop and in a phone browser. Helix also includes a mobile app for Android and iOS.

Task centre
Policy acknowledgements, SOP training and regularisations in one queue, with due dates.

Punch and attendance
Clock in and out, see the roster match, and raise a correction with a reason.

My roster and shift swaps
Published shifts only, and a swap request moves nobody until it is approved.

Leave
Balances, loss-of-pay impact, coverage handover and document gates before you apply.

Document wallet and letters
Generate employment and address letters yourself, and acknowledge policies with evidence.

Requests and help desk
Badge replacement, shift change, training nomination and GMP area access, with SLA tracking.

Employee self-service

Employees clear GxP training from their seat

A Today view: roster, attendance, latest pay, open tasks and pending SOP acknowledgements
Payslips, tax declarations, reimbursements and loan balances, with sensitive identifiers masked
Assessments launch inline and completion flows back into the qualification matrix and access
A privacy rights centre, and a mobile app with punch, learning, documents and biometric unlock

Employee self-service learning page with SOP and GMP assignments and a take-assessment action

Manager self-service

A manager workspace for the team, not the whole organisation

Direct-report roster with grade, location and organisation at a glance
Pending approvals, attendance exceptions and open training in one queue
Team signals: leave, documents needing attention, overdue training and pending reviews
Manager-scoped access, with no broad employee-read permission required

Manager self-service dashboard with team roster

No-code builder

Your admins configure it, without code

Business rules, forms, workflows, reports and terminology are tenant configuration. They are versioned, effective-dated and audited like everything else.

Builder · Forms and workflows

No-code GxP forms wired to workflow

Drag-and-drop form builder with typed fields, validations and conditional logic
Forms can be marked as GxP records, with an e-signature on submit and a supersede flow
Reusable approval workflows with SLAs, delegation and send-back
Guided journeys that sequence forms, training, acknowledgements and approvals

Form builder with a GMP area access request form

Builder · Configuration studio

Policies, fields, labels and reports as configuration

Custom fields, validation and role visibility on any entity
Effective-dated policy rules for leave, attendance, payroll and compliance
Governed report builder with scheduled delivery and purpose-gated, audit-logged exports
Rename labels, reorder navigation and switch module families on or off per tenant

Configuration studio for fields, labels and policies

Govern

Govern, validate and integrate

Security, privacy and validation controls are enforced on the server and visible to the people who have to evidence them.

Admin · Privacy and DPDPPharma moat

Privacy is a governed operating layer

Aligned to India's DPDP Act, 2023 and the notified DPDP Rules, 2025
Processing inventory, notices, consent ledger, Data Principal requests, retention, legal holds and breach records
A sensitive-field registry drives masking for identity, bank, salary, health and biometric data
Governed exports capture purpose, masking mode, file hash and actor

Admin · Security and audit

Part 11 and Annex 11 controls, enforced server-side

A tamper-evident, per-tenant, hash-chained audit trail with chain-integrity verification
Electronic signatures with re-authentication, signing meaning, record linkage and a content hash
Single sign-on with Active Directory, OpenID Connect and SAML, plus MFA and password policy
Validation support: URS, risk assessment, traceability matrix, test scripts and IQ, OQ and PQ evidence for on-premise deployments
Connectors for biometric devices, access control, identity, banking, statutory portals and GxP systems

Why Helix

Where Helix pulls ahead of cloud HR suites

Capability	Helix	Cloud HR suites
GMP qualification matrix and area access	Yes	No
Controlled-area auto-suspension on expiry	Yes	No
GxP assessments with item analysis and e-signature	Yes	Partial
Validation evidence for Part 11 and Annex 11 controls	Yes	Partial
Contract workforce, CLRA and OSH controls	Yes	Partial
Privacy processing inventory, rights portal and governed exports	Yes	Partial
Indian statutory payroll, bank files and close readiness	Yes	Yes
Full HR suite with employee and manager self-service	Yes	Yes
No-code fields, workflows, policies, reports and forms	Yes	Partial
On-premise deployment, data in your data centre	Yes	No

The right-hand column reflects the typical capability of general-purpose cloud HR suites when applied to a pharma plant. Parity items are table stakes. The rest is the moat.

Let's build it on your floor

A guided pilot on one site, with your organisation, your SOPs and your GMP areas. In weeks, on your own infrastructure: discovery, pilot, then rollout.

Book a demo contactus@kryshara.com