Security

The separation is enforced by the database itself, not just the app. Even if the app had a bug, another company’s data would stay hidden. Files are separated the same way.

Permissions are set action by action. Site managers can be limited to their own sites. Wages are visible only to the people you allow.

Only the company owner creates accounts, with a one-time code valid for 15 minutes. There is no public sign-up. A deactivated account loses access immediately.

Logging in and sensitive actions are confirmed with a code from an authenticator app on your phone. A stolen password alone isn’t enough.

For every change you see who changed what, when, and what it looked like before. Entries can’t be edited or deleted in the app. They are chained with checksums, so any tampering would show.

When anyone other than the owner opens wages, site finances or internal notes, it is logged. So is every time our support enters your company. Support can only read.

Photos of ID documents sit in private storage, and links to them expire after one hour. The connection to the app is always encrypted.

We back up your data every day and keep backups for 7 days. If something goes wrong, we restore it from a backup.

Reading documents from a photo runs in a Google data centre in the EU. The AI only suggests and doesn’t return national ID numbers. Your data is never used to train AI.

You can export your data to Excel yourself at any time. The contract runs month to month, with no long commitment. If you leave, within 30 days we also hand over document photos as files, then delete everything.

With your contract you get a GDPR data processing agreement, including the list of all sub-processors. Ask for it at hello@werkum.eu.