Skip to content
Regsta
Create a company account
Regsta
Create a company accountSign in

How is employee data kept secure?

Written for
  • Admin
  • Auditor
  • Evaluating Regsta

Short answer

Each company's data is kept apart by row-level security in the database, connections use TLS, and clock events, corrections, approvals and exports go to an audit trail that cannot be changed during the retention period. The database and sign-in are hosted in Germany.

Where the data is

  • The database and sign-in run at Hetzner in Falkenstein, Germany. The application runs on Vercel in Frankfurt.
  • E-mail delivery, rate limiting and push notifications use other providers. The subprocessors page lists each one.
  • The database is backed up continuously, with a separate nightly copy, to storage apart from the production server.

Who can see it

  • Row-level security stops users in another company from reading your data, even if the application has a bug.
  • Each person's role is checked on the server before data changes. Only Admins and Payroll users see hourly rates.
  • Regsta's operators can reach company data for maintenance. On each day one does, a row is written to that company's audit trail.

What is not collected

  • No location data and no photos at clock-in.
  • No advertising or profiling cookies and no Google Analytics.

Security at Regsta

Subprocessors

Regsta has no independent penetration test, no ISO 27001 certification and no SOC 2 report, and says nothing to the contrary.

Related questions

Did this not answer your question?

Tell us what you were looking for and we will answer it.

Contact us