BambooHR Security Basics Overview Security best practices for BambooHR API integrations covering API key management, webhook HMAC verification, PII handling, and access control. BambooHR contains highly sensitive employee data (SSNs, salaries, addresses) — treat every integration as PII-critical. Prerequisites - BambooHR API access configured - Understanding of environment variables and secrets management - Access to BambooHR admin settings Instructions Step 1: API Key Security Key management rules: - Each environment (dev/staging/prod) uses a separate API key - Create API keys under service…