Where your people data lives, and who can reach it
HR data is the most sensitive data a company holds about its staff. This page says plainly how AstraHR handles it, including the things we cannot claim yet.
Your data stays in the EU
The database runs in Ireland (eu-west-1) and the application is served from Frankfurt. Nothing about your people data leaves the EU in normal operation.
Tenants are separated in the database
Every table carries an organisation, and Row Level Security is enabled on all of them. Isolation is enforced by Postgres itself, so a bug in application code cannot return another company's rows.
Sign-in without passwords
Access is by emailed magic link. There is no password to guess, reuse across sites, or leak in a breach elsewhere.
Signup is rate limited
Creating a workspace needs a confirmed email address, and attempts are capped per email domain and, where the platform provides a client address, per IP. An organisation cannot be created from an address that has not proved it owns the inbox.
Pay is revoked, not hidden
Row Level Security filters rows, not columns, and every signed-in user is the same database role. So salary and pay period are revoked from that role outright and granted back only to the code paths that need them, rather than being hidden in the interface.
Permissions by role
What someone can see and change follows their role in the organisation, checked on the server rather than hidden in the interface.
What we do not claim yet
AstraHR is in early access. Plenty of HR platforms imply certifications they are still working towards, and you will find out during procurement anyway. Here is the list, so you do not have to ask.
- ISO 27001 certificationNot yet
- SOC 2 Type II reportNot yet
- BSI C5 attestationNot yet
- A contractual uptime SLANot yet
- A published third-party penetration testNot yet
If one of these is a hard requirement for your organisation, say so early and we will tell you honestly whether the timeline works for you.
For how we handle personal data under GDPR, including the legal bases, the sub-processors and how to export or erase a record, see the privacy policy.
Bring your security questionnaire
We would rather answer the hard questions before you commit than after.