Amara connects with your HRIS, calendars, and communication stack via secure REST APIs or SFTP. Real‑time when you need it, batch when you prefer it.
Sync employee master data, org charts, cost centers, and lifecycle events. Choose real‑time API or scheduled SFTP depending on your policy and infra preferences.
REST API
Best for near real‑time experiences (new joiners, movers, leavers). OAuth2/JWT auth, idempotent endpoints, RBAC‑scoped keys.
Endpoints: /employees, /org-units, /managers, /attributes, /events
Filters & pagination for delta sync; webhooks for change events
TLS 1.2+, HMAC request signing (optional), IP allow‑listing
Audit logs for every call; 429/5xx retry semantics
GET /api/v1/employees?updated_after=2025-08-01T00:00:00Z Authorization: Bearer
SFTP (Batch)
Best for daily or weekly transfers when API access isn’t preferred.
PGP‑encrypted CSV/Parquet; schema validation & error reports
Delta or full loads; automated de‑duplication
Secure server with per‑customer chroot & key‑based auth
Delivery acknowledgements & checksum verification
Google Calendar
Create HRBP follow‑ups, 1:1s, and resolution reviews from within Amara.
OAuth with domain‑wide delegation (admin consent)
Bi‑directional: updates/declines reflected in Amara cases
Auto‑reminders, time‑zone aware scheduling
Microsoft Outlook
Works with Microsoft 365 & Exchange Online.
Azure AD consent, Graph API integration
Attendee availability, room resources, series meetings
Single‑sign‑on & conditional access compatible
Reach employees on channels they already use. Mix SMS for reach, voice for urgency, and email for detail—fully audited and opt‑out compliant.
SMS Gateways
Global & local providers (e.g., Twilio, Gupshup, MSG91, Infobip).
OTP, survey links, nudges with DLT/opt‑in compliance (India)
Automatic fallback & delivery reporting
Voice (IVR)
Trigger automated or agent‑assisted calls for critical follow‑ups.
Text‑to‑speech, call‑flows, voicemail capture
Use cases: absentee alerts, escalations, wellbeing checks
SMTP relay, Outlook, and Gmail.
Branded domains (SPF/DKIM/DMARC), template personalization
Bounce handling, UTM tracking, audit logs
Whether via API or SFTP, data enters a secure ingestion layer, is validated, encrypted, and mapped to your org structure before powering conversations, surveys, dashboards, and alerts.
TLS 1.2+, RBAC, secrets vaulting, IP allow‑listing, and full auditability. Certified processes aligned with ISO/IEC 27001:2022, SOC 2 Type II, GDPR and India DPDP Act 2023.