01
HR marks a hire
HR marks a hire — or you upload a CSV
PRODUCT · JOINER PATH
Day-one access, automatically.
KINT reads new hires from your HR system. Sets up Google Workspace, Slack, GitHub, Adobe — and 196 other apps — before the laptop boots.
KINT runtime
Automated Onboarding
The same governed runtime handles source events, app actions, audit evidence, retries, and replay.
HR source
BambooHR hire
Rules
role + location
Apps ready
Google + Slack
PROOF PATH
How KINT gets a hire ready.
02
KINT reads department, role, manager, location
KINT reads department, role, manager, location
03
Apps provision in parallel
Apps provision in parallel — accounts, groups, MFA, licenses
04
Manager and new hire notified with magic-link login
Manager and new hire notified with magic-link login
WHAT IT HANDLES
Built for the real access path.
KINT covers the whole route from source truth to app action: employee data, policy rules, connector readiness, approvals, evidence, and replay stay in one governed path.
Source truth
Governed action
Audit evidence
Hire events from Workday, BambooHR, ADP, Personio, Rippling, Gusto, HiBob, Darwinbox, Keka, Greythr, Zoho People, iSolved, Paylocity, or CSV
Provisioning rules by department, role, location, manager, cost center, seniority — composable, not hardcoded
Parallel app actions: accounts, group memberships, calendar resources, MFA enrolment, license assignment
New-hire welcome flow: manager email + employee magic-link first login
HOW IT WORKS UNDER THE HOOD
How rules become provisioning.
rule: engineering_new_hire
when: department == "Engineering"
provision:
- google_workspace: { ou: "engineering", license: "Business Plus" }
- slack: { channels: ["#engineering", "#general", "#announcements"] }
- github: { team: "engineers", role: "member" }
- jira: { project_roles: ["engineering:developer"] }
- figma: { team: "product-design", role: "viewer" }
- adobe_cc: { license: "creative-cloud-all-apps" }
on_complete:
- notify: manager
- log: cc6.1Declare the outcome
Write what the hire should receive. KINT expands it into connector calls and retry-safe operations.
Version every rule
A changed rule applies forward. Existing access is not silently backfilled without a governed workflow.
Stack policies cleanly
Department, location, and seniority rules compose instead of becoming one brittle access checklist.