Security & privacy
Care is part of the architecture
ReiherField processes employee data. Separation, access control and traceability are therefore foundations, not settings.
Strict tenant separation
Every query is server-side limited to the company's own tenant. Access across tenant boundaries is not provided.
Secure access
Invitations use expiring, single-use links. Password resets are time-limited and logged. Sessions follow clear rules.
- Invitation links with expiry
- Time-limited reset links
- Account suspension instead of data loss on deactivation
- Session management with defined rules
Audit log
Sensitive actions — approvals, corrections, role and module changes — are logged traceably. In a dispute, what is documented counts.
Security & privacy
Roles and permissions
Four roles with clearly separated permissions:
- Platform administratorManages companies and modules — without access to operational data.
- AdministrationSees and processes only the data of the company's own tenant.
- DriverSees only their own times, receipts and requests.
- HRAccess only to the areas required for HR administration.
Privacy and data minimisation
ReiherField is guided by the principles of data minimisation and purpose limitation: only data required for time tracking and operations is collected.
- Data minimisation as a principle
- Transparent information on deletion and retention
- Access, correction and deletion as a process
- No advertising trackers on this website
This website
The website itself follows these principles: in its current configuration no cookies, no tracking and no external fonts — all content is loaded from our own server. Optional spam protection on the contact page is disclosed separately.
Questions about security and privacy?
We are happy to explain how ReiherField protects data and which tools are available to you.