Privacy you can verify
zeitfair was built for GDPR, German BDSG and works councils – not retrofitted.
EU data residency
Database and files are stored in Frankfurt (AWS eu-central-1).
Tenant isolation
Row-level security in the database: every query is limited to your workspace.
Immutable audit log
Every change is recorded in a hash-chained audit log.
Roles & permissions
Owner, admin, manager, employee – individual data only for authorised roles.
Deletion concept
Configurable retention, automatic deletion, export and erasure on request.
Transparent subprocessors
Full list including optional AI processing – only if you enable it.
Subprocessors
| Supabase Inc. | Database, authentication, file storage | EU (Frankfurt, AWS eu-central-1) |
| Vercel Inc. | Application hosting / CDN (region fra1) | EU edge + US company |
| Stripe Payments Europe Ltd. | Payment processing, subscription billing | Ireland / EU |
| Resend Inc. | Transactional email | EU region (Ireland) |
| MiniMax | Optional AI insights (categorisation, budget and utilisation analysis) — only if enabled by the customer | Outside the EU (third country) |