Data security in PapaHR

Version of 26 October 2026

• Data in Europe. Servers and database — DigitalOcean, Frankfurt (Germany); files — Cloudflare R2, region "Eastern Europe".
• Backups. The database is copied automatically every day, and copies are kept for 7 days (Frankfurt). In addition — a weekly copy, encrypted with AES-256, with a restore check; it is kept for 90 days in a separate DigitalOcean Spaces storage in Frankfurt.
• Encryption. The connection to the website is HTTPS only. Passwords are stored as a hash. The company's AI key is stored encrypted and is never shown.
• Sign-in. A confirmation code when signing in from a new device — always for administrators, for the owner and HR if the company turned it on. You can remember your device for 30 days, and sign out of all other devices with one button.
• Role-based access. The owner, HR, manager and employee see only what is theirs. The owner sees salaries; HR sees them only with the owner's permission. There is a "hide salaries" button on the screen.
• Personal links (meetings, onboarding plans, time off) are signed, so they cannot be guessed.
• Employee photos and résumés open only inside the company account; direct access to them from the internet is closed.
• Bot protection at sign-up and in the "Write to us" form.
• Found a vulnerability? Write to [email protected].