Built to be trusted with sensitive data.
HR and operations systems hold contracts, salaries, ID numbers and performance records. Here is how we protect them today, without badges we haven’t earned.
A separate database per customer
Isolation is enforced by the database layout, not by code that has to remember a WHERE clause.
Dedicated database per customer
Each customer gets its own MariaDB database. The application connects to a different database per request, chosen from the subdomain. There is no shared table where a missing filter could leak another customer’s records.
No cross-customer queries
Customer data never appears in joins across customers. The app has no screen or report that lists employees across all customers.
Platform data kept apart
Subscriptions, billing and platform settings live in a separate central database. Your business data never mixes with platform metadata.
Cross-branch rollups keep isolation intact
Parent companies and franchise groups can see totals across branches without weakening the one-database-per-customer model.
Aggregate only, never row-level
The group dashboard reads a fixed catalog of counts and sums: headcount, payroll cost, hours, outstanding loans. It never sees employee names, salaries or individual records.
Branches opt in first
No number leaves a branch until that branch consents. A branch can withdraw at any time, which removes its totals from the rollup.
Suppression and audit log
Small branches are suppressed so individuals can’t be re-identified from a total, and every aggregation run is logged. Included with Complete and Enterprise.
Encrypted in transit and at rest
Modern encryption on every connection and on the storage layer.
TLS 1.2+ everywhere
All connections use modern TLS, and Strict-Transport-Security tells browsers to use HTTPS only.
Encryption at rest
Data is stored on encrypted disks at our hosting provider, and backups are encrypted.
Hashed passwords
Passwords are hashed with bcrypt. We never store, log or send passwords in plain text, and new passwords are checked against known data breaches.
Hosted in Germany (EU)
Customer data is stored in the EU, where European data protection rules apply.
Hetzner Online GmbH, Germany
All production servers and customer databases are in Hetzner data centers in Germany, which are ISO 27001 certified. Every customer is hosted there; there is no region choice.
Service providers
A few services process limited data on our behalf, for example OpenAI for the Mia assistant, Lemon Squeezy for payments and Microsoft 365 for email. The full list is in our privacy policy.
Permissions, sessions and single sign-on
Controls an IT or compliance team can rely on.
Role-based permissions
Every action is checked against a permission. Owners, admins, HR, finance and employees have distinct, configurable roles.
Two-factor authentication on every plan
Authenticator-app 2FA with recovery codes. Admins can require it for whole roles or the whole organization.
Single sign-on (Complete and Enterprise)
Sign in with Microsoft Entra ID, Google Workspace or another SAML 2.0 / OIDC identity provider.
Session and login history
Every user can see where and when their account signed in. Sessions expire after inactivity and after a fixed maximum length.
Activity log on every record
Investigations and audits are easier when every change is timestamped and attributed.
Activity log per record
Creates, updates and deletes are recorded with who, when and what changed.
Retention by plan
Activity log retention: 90 days on Attendance, 1 year on Complete and 7 years on Enterprise.
Login history
Each user can review recent successful and failed sign-ins, with IP address, browser and device.
Exports for auditors
Activity, leave, payroll and procurement reports can be filtered by date and exported.
Backups and recovery
Nightly backups and a recycle bin for everyday mistakes.
Nightly automated backups
Every customer database is backed up nightly, with daily, weekly and monthly copies kept.
Recycle bin
Deleted records stay in the recycle bin for 30 days and can be restored in one click.
GDPR and Israeli privacy law
Designed so your data protection officer has clear answers.
Processor and controller roles
For your employees’ data we are the processor and you are the controller. For website visitors and account owners we are the controller. Both are described in our privacy policy.
Access and portability
Users can download the personal data we hold about them from the Privacy Centre.
Erasure
Accounts can be closed and personal data deleted on request.
No training on your data
We do not use customer data to train AI models, and OpenAI’s API (used by Mia) does not train on it either.
Breach notification
If a breach affects your data we notify you and the relevant authorities within the legal deadlines (72 hours under GDPR).
Maintained dependencies, tested releases
A Laravel and Filament stack kept on supported versions.
Dependency monitoring
We track security advisories for our dependencies and patch critical issues quickly.
Automated tests
An automated test suite runs before releases.
No ad trackers in the app
The Momentumpro app has no advertising trackers. Our marketing website uses analytics and ad measurement only if you accept those cookies.
What we have today.
We don’t show compliance badges we haven’t earned. Here is the current state.
| Standard / control | Status | Notes |
|---|---|---|
| GDPR (EU) | live | Data export and deletion, processor agreement on request, breach notification. |
| Israeli Privacy Protection Law | live | Controller and processor duties, including Amendment 13 transparency. |
| Encryption in transit | live | TLS 1.2+ on all subdomains. |
| Encryption at rest | live | Encrypted storage at our hosting provider; encrypted backups. |
| Separate database per customer | live | Built into the architecture, not a filter. |
| Activity log | live | Every record, every change. Retention depends on the plan. |
| SAML / OIDC SSO | live | Included with Complete and Enterprise. |
| SOC 2 | not certified | We follow SOC 2-aligned controls; certification not yet obtained. |
| ISO 27001 | not certified | Our hosting provider (Hetzner) is ISO 27001 certified; we are not. |
Found a security issue?
We’d rather hear about it from you than from an attacker. Email support@momentumpro.pro with reproduction details. We acknowledge within 24 hours and aim to remediate critical issues within 7 days. We don’t run a paid bug bounty program, but we credit responsible disclosures.
Ready when your security team is.
Data processing agreement, security questionnaire, sub-processor list: we’re happy to provide them.