GDPR & SECURITY
See the safeguards used for core HR records, how the service assists with personal-data requests, and the roles of providers supporting hosting, AI, communications, billing and analytics.
WHAT WE DO
Data residency
Core HR hosting and related services have different processing arrangements. Our provider list explains their roles and locations; customer-enabled integrations can send data to additional recipients. EU hosting does not mean that every recipient processes exclusively within the EU.
Sub-processors
Encryption
Selected sensitive fields, including banking and tax identifiers, use AES-256-GCM encryption. Our security measures describe the safeguards used for the wider service.
Access control
Four access roles—Owner, HR Admin, Manager and Employee—control which records and actions people can access. Tenant-scoped controls separate company workspaces.
AI processing
Perso AI uses Mistral AI. AI features process the information needed for the requested task. Review our sub-processor list and your workspace settings before including personal data.
Audit logging
Audit records capture supported actions such as changes, exports and erasure requests, including who performed them and when. Retention is subject to the applicable settings and legal holds.
YOUR EMPLOYEES
Access (Article 15): employees can request access to their personal data
Rectification (Article 16): employees can request correction of inaccurate personal data
Erasure (Article 17): employees can request deletion, subject to legal conditions and exceptions
Portability (Article 20): applies to certain data processed automatically on the basis of consent or contract
OUR PARTNERS
Hetzner Cloud: Infrastructure (Germany)
Mistral AI: AI processing (EU and EFTA)
Brevo: Transactional email (France)
Stripe: Payment processing (Ireland)
READY WHEN YOU ARE
Bring your everyday HR tasks together and give your team an easier way to get things done.