Encrypted documents
Every uploaded file and every generated PDF is encrypted at rest with AES-256-GCM, each with its own key. The master key is kept outside the database and can be rotated.
Security
Security and data protection
Working hours, absences, salaries and personnel files are among the most sensitive data a company holds. Apensum is built to keep them protected.
Encrypted connections
All traffic runs over HTTPS (TLS), with certificates renewed automatically.
Least privilege
Permissions per area and scope: own data, direct reports or everyone. Managers see their own team only; the personnel file belongs to HR by default.
Traceable changes
Records keep a version history, and sensitive actions such as sharing a personnel document or forwarding an item by e-mail are written to an audit log.
Separated organizations
Each organization’s data is kept apart. People only see the organizations they belong to.
Hosted in Switzerland
Apensum and this website run on servers in Switzerland.
AI only if you want it
The assistant is optional. When it is switched on, it answers with exactly the permissions of the person asking and never sees more than they can. Questions are processed by an external AI provider.
A website without tracking
This website sets no cookies, uses no analytics and loads nothing from third parties.
Questions about security or data protection? Get in touch – we are happy to answer them in detail.
Try Apensum yourself
The demo runs with the sample data of a fictitious company. Pick a demo account on the login page and click through – no registration needed.