By department
HR and team
Leave, blind-scored hiring, onboarding, 1:1s – and nothing that measures the person instead of the work.
What it does for HR and team
Every item below is live in the product today; the link opens it on the product page.
Security – the first thing we built
Your company's data stays yours. Inside, too, people see only what they need.
We do not promise with adjectives but with how the system is built. Everything here works today; what is still a plan is marked as such.
Every company sealed off – at the database level
Every table knows, row by row, which company a record belongs to, and only that company's members can reach it (row-level security). The database itself filters, not the app; an automatic check allows no table without it.
Two-step sign-in for everyone – not an option
A password (or Google/Apple) and an authenticator-app code on every sign-in, no SMS. Sensitive steps – roles, export, billing, deletion – ask for a fresh code.
Data and files in the EU
The database, files and backups in Frankfurt, the server that runs the AI work in Vienna, the website served from Frankfurt.
The AI sees less than your employees
It only drafts: it has no send, delete or pay tool. It works with the company's own rights and never sees another company or a key. A field you mark "hidden from agents" never reaches it.
A message between two people stays between them
Private messages sit outside every workspace: no admin reads them, no AI reads them, and not even our own server key can reach them through the interface – only the two participants.
Every action is logged
Sign-ins, card changes, approvals (bound to the exact content), decisions together with the dissent, admin actions: who, when, what. The owner can read it back.
No model is trained on your data
AI drafts are produced by Anthropic (Claude) under its commercial terms: what we hand over is not used to train models. Anthropic processes in the USA under the EU–US Data Privacy Framework and standard contractual clauses – details in the privacy notice.
Coming next – a plan, not a promise
- Need-to-know inside the company: visibility per department and per site, sensitivity labels, "who viewed what".
- A tamper-evident (chained) audit log.
- An external penetration test, then an ISO 27001 / SOC 2 roadmap.
- AI processing in an EU cloud region – planned for institutional customers; the decision is still open.
Trust & security – the full page → Including what is not there yet.