Security and data residency
Where your company's data is stored (only in the EU), how it is encrypted and backed up, who can see what, and what goes into the append-only audit log.
Where data lives
Section titled “Where data lives”Each company has its own database, created in Cloudflare’s EU jurisdiction. Files, exports and backups are stored in EU-only storage too. One company’s data can’t reach another company’s account, because they never share a database.
Encryption
Section titled “Encryption”- All traffic uses TLS.
- National ID, social security, IBAN, tax, passport and health fields are encrypted again, field by field, with AES-256-GCM.
- Each company has its own key, wrapped by a master key held outside the database.
Backups
Section titled “Backups”Each company’s database can be restored to any point in the last 30 days. A nightly backup is encrypted with a separate key and kept in the EU.
Who sees what
Section titled “Who sees what”| Role | Sees |
|---|---|
| Employee | Their own record, balances and leave |
| Manager | Their direct reports’ ordinary records and leave |
| HR | Everyone, including pay and sensitive fields |
Our staff see account details such as your plan and domain. Opening your data for support needs a time-limited grant from your company, logged on both sides.
Audit log
Section titled “Audit log”Every change, every read of sensitive data and every export goes to an append-only log, with sensitive values redacted.
Documents for your DPO
Section titled “Documents for your DPO”The data processing agreement is on the main site.