Last updated: 14 October 2026
HC Controller works on positions, pay rules and monthly totals. It does not need names, birth dates or other personal data of individuals, and we ask you not to upload them. Use any position id. Some Restructuring analyses need age or tenure for individual people; use them only with data your own privacy and legal advisers have cleared.
Every workspace is private to the person who opened it. Each request is checked against a signed session, and the data of one workspace is not readable from another. Customer plans, seats and invoices are visible to the customer’s own administrator only.
The database is in Frankfurt, Germany, and server functions run in Frankfurt. Our providers are Vercel (hosting), Supabase (database), Resend (email delivery) and Microsoft (the mailbox that receives contact-form messages). They process data on our behalf. The full list and the retention periods are in the privacy notice.
The site is served over HTTPS only.
You sign in with a one-time link sent to your work email. There are no passwords to leak. The session cookie is signed, strictly necessary, expires, and is removed when you sign out or delete your workspace.
Your data is not used to train models, is not sold, and is not shown to other customers. It is used to produce the results you ask for.
A test workspace and everything in it is deleted automatically 30 days after it was created, and immediately when you press “Delete my workspace”. You can also ask us to delete your data at any time.
Changes to positions, position actions and uploads are recorded with who made them and when, so a figure can be traced back to its source.
We hold no third-party security certification (such as ISO 27001 or SOC 2) and have not commissioned an independent penetration test. If your procurement process requires either, tell us before you start and we will answer your security questionnaire in writing.
If you think you have found a weakness, or something in your workspace looks wrong, write to hello@hccontroller.com.