Security and data protection

Where your data lives

Your data is hosted in the European Union with established cloud providers, encrypted in transit and at rest, and backed up daily. It is never sold or shared with other customers.

One company, one boundary

Every record belongs to your company and every request is checked against that on the server. Nobody from another company can see your workers, sites or attendance, and the assistant is scoped the same way.

• Admins and site managers see their own company.
• Foremen see the sites assigned to them.
• Workers see their own shifts, payslips and time off, and nobody else's.

Attendance you can defend

A clock-in only counts once it has been verified: the person, the place and the device. The record and its trail are kept, so hours paid are hours that happened.

Working-time records are retained for four years, as Spanish law requires (RDL 8/2019).

Biometrics and consent

Face verification is optional, per company and per worker. Consent is recorded with the method and policy version, and the worker can withdraw it in the app in one tap, which removes their biometric data straight away. A non-biometric alternative is always available, so nobody is forced.

Obrelier acts as processor; your company is the controller. A data processing agreement is available on request.

Erasure and retention

Workers can request erasure from the app. Requests reach your dashboard with the legal deadline and are tracked to completion. Data that must be retained by law is kept and the worker is told why.

When a contract ends, your data is retained for a short wind-down and then deleted on request.

Application security

• Encrypted connections everywhere, with strict browser security policies.
• Obrelier staff never see passwords.
• No third-party keys are exposed in the browser.
• The assistant is read-only, usage-limited, and never receives contact or identity numbers.
• The platform is updated continuously and deployments are reviewed.

Questions

Security or data-protection questions: privacy@obrelier.com. We answer within two working days and will complete your supplier questionnaire.