Your employees' data, hosted in Europe and kept separate.
Planifast processes HR data. Here is how it is protected, who processes it and how long it is kept.
Hosting in Europe
The database is hosted in Paris. Application processing also runs in Paris.
Encryption
Traffic is encrypted with TLS 1.3, and secure connections are enforced in the browser (HSTS). Stored data is encrypted by the database host.
Isolation
Every record belongs to its organisation. Access rules in the database and server-side checks stop one organisation from reading another's data.
Role-based access
Employees, managers and HR each see what concerns them. Sensitive personal data (address, IBAN, family) is visible only to HR and the person concerned.
Two-factor authentication
Each user can turn on a one-time code generated by an authenticator app.
Traceability
Document views, exports and logins are logged. Signed documents carry a fingerprint that proves their integrity.
Each document has its retention period, deletion is automatic.
Retention periods are set for each type of document, in line with the GDPR and the Labour Code. A monthly purge deletes what has expired and logs the deletion.
- Team managers never have access to the file or to personal documents.
- Former employees keep read-only access to their documents.
| Data | Period |
|---|---|
| Employee file (contract, amendments, certificate) | 10 years after exit |
| Payslips | 10 years |
| Residence permit | 3 years after exit |
| Diploma, fitness certificate | 30 days after exit |
| ID document of an EU national | Checked, never copied |
| Photo of bank details | Read on the device, never sent |
| Customer data after the contract ends | 30 days, then deletion |
Your rights and your employees' rights
You remain the controller of your employees' data. I help you answer their requests for access, correction or deletion. A data processing agreement is offered with the contract.
A security question?
Write to me at contact@planifast.com. I answer security questionnaires from your IT or legal teams.
Let us look at what your team needs.
I will show you the tool on cases that look like yours, remotely or at your premises.