Your data. In Germany. Protected.
Openness about hosting, security and compliance: where your data sits, how it is encrypted and which standards MetronHR meets.
- Operator
- AMNAU GmbH, Hanover
- Host
- Hetzner Online GmbH
- Servers
- Nuremberg and Falkenstein
- Transfer
- Encrypted via TLS (HTTPS)
- Backups
- Daily, in German data centres
Software made in Germany, with support in German and no detour via foreign corporations.
What you can rely on
Four foundations that apply to every MetronHR account, at no extra charge, from day one.
Hosted in Germany
All customer data sits exclusively in German data centres in Nuremberg and Falkenstein, operated by Hetzner Online GmbH. No hosting outside the EU.
GDPR compliant by design
Data protection is built in from the start, not bolted on afterwards. A data processing agreement and a record of processing activities are included.
ISO 27001 certified data centre
Operated in an ISO 27001 certified data centre run by our host Hetzner, with physical access control and redundant infrastructure.
GoBD compliant
Time records and reports are stored in a GoBD compliant and traceable way. In the Professional plan the change history records every correction with the person and the time.
Your data stays in Germany
MetronHR runs in German data centres in Nuremberg and Falkenstein. Your data is subject to German and European law, not to foreign surveillance laws.
- Your data does not leave the EUProcessed and stored exclusively in Germany, under German and EU law.
- No access by foreign authoritiesWe are a German company, and the application runs at a German host with no US parent. The US CLOUD Act and FISA 702, which bind US providers regardless of where the server stands, therefore do not apply.
Security in detail
How we protect your data technically and organisationally.
Your data
- Encrypted transferThe connection to MetronHR is encrypted end to end with TLS (HTTPS), so your data is protected in transit.
- Daily backupsDaily backups in German data centres, so nothing is lost if the worst happens.
- No vendor lock-inYour data belongs to you. Export at any time as CSV, Excel or PDF, including when you cancel.
Access
- Two-factor sign-in in every planTwo-factor sign-in and passkeys are available in the user settings, with no plan limit and no extra charge. In the cheapest plan too.
- Signing in with the company accountIf you use Microsoft Entra ID, you store your directory configuration once and after that everyone signs in with their company account. At no extra charge and in every plan, with the password staying in the company's directory.
- Role-based accessYou control who sees what in detail through roles and permissions. People see only their own data, managers see their team.
Compliance and documents
The basis for working together in line with data protection law, openly and on the record.
- privacy policy (German)Which data we process, how and for what.
- Data processing agreement and record of technical measuresA processing agreement under Art. 28 GDPR, with the annex on technical and organisational measures. It is ready to sign in the customer account under company settings, and available on request before you sign up.
- Legal notice and operatorOperated by AMNAU GmbH, based in Hanover.
Related
Where to go from here, and what waits for you there.
Data in Germany, with names on the record.
The application and customer data sit with Hetzner Online GmbH in Nuremberg and Falkenstein. Data processing agreement and technical measures on request, export at any time. 14 days free.
- No credit card required
- Ready quickly
- Cancel monthly
- Full access to every feature
No credit card, cancel any time