Your data deserves solid protection

Your data is stored in its own, strictly separated database — not in one big shared pool. So it stays separated even if something goes wrong elsewhere.

All data is stored and processed in EU data centres. No transfers outside the EEA, unless with appropriate safeguards.

All traffic — website, app, clock devices — runs over SSL/TLS. Passwords are stored hashed, not in plain text.

Automatic daily backups, so you can restore after an incident. Export your own data whenever you want.

Planners, back office, clients and flex workers each see only what they need. Access is configured per user role.

Every subscription includes a DPA covering confidentiality, security measures, sub-processors, breach notification and deletion/return of data (export up to 90 days after termination).

A flex worker's app sign-in expires by itself after 30 days. Lost a phone, or does someone leave? Disable the account or change the password and the app is signed out straight away.

Passwords for flex workers are generated at random and stored hashed. A new login sheet makes the old password stop working. "Forgot password" never reveals whether an account exists.

Does a flex worker ask for their data, or to be forgotten? Export their data, or anonymise them. Deleting something always asks for confirmation first.