Data security
People data deserves the highest protection
Salaries, positions and plans are highly sensitive data. Basqo is ISO/IEC 27001 certified, GDPR compliant and hosted in Germany.
Certified to ISO/IEC 27001:2022An independently audited information security management system (ISMS), from infrastructure to access control.More on the certification →FrankfurtHosting in Germany
ISO 27001certified since 2026
AES-256Encryption of stored data
14 daysPoint-in-time recovery
Roles, permissions and history
Everyone sees exactly what they should
Access is granted per person, and every change stays traceable.
Roles and permissions
| Role | Salaries | Planning | Approvals |
|---|---|---|---|
| Finance | all | all | yes |
| HR leadership | all | all | yes |
| Manager | own department | own department | no |
FinanceSalariesallPlanningallApprovalsyes
HR leadershipSalariesallPlanningallApprovalsyes
ManagerSalariesown departmentPlanningown departmentApprovalsno
Change log
Today 09:42A. Weber moved the start date of “Backend Developer” to Feb 1
Today 08:15HRIS sync 3 changes applied
Yesterday 17:03M. Klein approved “Budget 2027”
Yesterday 11:20S. Roth was invited as manager
Fact sheet
All the facts for IT, data protection and procurement
The points a security review asks about, at a glance.
Certification
- ISO/IEC 27001:2022 certifiedAudited by an accredited auditor and reviewed regularly
- Information security management system (ISMS)From infrastructure to access control and encryption
Data protection
- GDPR-compliant processing
- Data processing agreement (DPA)Available for every customer
- Minimal data accessThe HRIS connection only reads data and never writes back
Hosting
- Data centers in Frankfurt, Germany
- Infrastructure by AWSAn established provider with its own certifications
Encryption
- TLS in transitBetween browser, Basqo and connected systems
- AES-256 at restEncrypted database
Access
- Roles and permissions per personVisibility by department, dimension and cost data
- Invitation instead of open accessOnly invited people get access
Traceability
- Log of every changeWho changed what and when
- Recovery up to 14 daysData and versions at any point in time
Security questions before you start?
In a call, the Basqo team answers questions from IT and data protection directly.
Schedule a call
English
© 2026 Basqo. All rights reserved.