How we look after your company’s data.

Where data is stored

All workspace data, including people, requests, balances and documents, is stored in a managed PostgreSQL database in Frankfurt, Germany. Data travels only over encrypted connections.

Each company’s data is separated by access rules in the database itself, not only in the interface. Even an error in the interface cannot show one company’s data to another.

Who sees what

Inside a company, access is set by four roles. The owner can also open or close individual sections for a specific person.

Sign-in and accounts

• Two-step sign-in with an authenticator app. A company can make it optional, required for the owner and administrators, or required for everyone.
• People are told by email when their password or email address changes.
• One email address belongs to one person, and access ends when someone leaves the company.

Privacy in the product

On the team calendar colleagues see that someone is away. The type of absence, for example sick leave, is visible only to the person, their manager and the approver. This rule is part of the platform and cannot be switched off by mistake.

Every decision on a request is recorded: who made it, when and with what note.

Export and leaving

Balances, history and analytics export to Excel at any time. If a payment is delayed, the workspace keeps working fully for a week and then becomes read-only. HR data is never deleted because of a payment.

Service providers

We rely on a small number of infrastructure providers.

Report a problem

If you think you have found a security issue, write to info@rankform.nl with the subject “Security”. We confirm receipt within one working day.