GDPR is not a feature. It is our foundation.

Data residency

HR application data is stored in Hetzner Cloud data centres in Falkenstein and Nuremberg, Germany, and is processed only within the European Union. The only routine onward transfer outside the EU is to Stripe Inc. (United States) for subscription billing, under the European Commission's Standard Contractual Clauses; Stripe sees only billing data (account-owner name, email, billing address, VAT identifier, payment tokens) and never employee HR data. The full sub-processor list, including each vendor's role, location, transfer mechanism and DPA link, is published at /legal/sub-processors.

Encryption

All data in transit is encrypted with TLS 1.3. Sensitive employee data (salaries, health information, personal identifiers) is encrypted at rest with AES-256. Database backups are encrypted.

Access control

Role-based access control with four levels: Owner, HR Admin, Manager, Employee. Strict tenant isolation ensures no cross-tenant data leakage. Every data access is logged.

AI processing

Our AI features are powered by Mistral AI, a French company with EU-based inference. No employee data is sent to OpenAI, Google, or any US-based AI provider. Employees can opt out of AI processing entirely.

Audit logging

Every data access, modification, and deletion is logged. Retention periods vary by plan: 30 days (Free), 1 year (Starter), 2 years (Growth), unlimited (Business).