Security built in at every layer
Your workforce data is some of the most sensitive you hold: payroll, locations and personal details. Celtucom is built so protection never depends on a single control.
Certified management systems
These certifications are held by the company that develops Celtucom, the provider named at the bottom of every page.
ISO/IEC 27001:2022
Information security
ISO 9001:2015
Quality management
ISO 14001:2015
Environmental management
Who builds Celtucom and where it comes from is on about us.
Security highlights
EU data hosting
Production data is hosted in the European Union (Frankfurt, Germany).
Encryption
All traffic runs over TLS and data is encrypted at rest.
Access control
Granular role-based permissions, enforced in the app and again at the database.
Two-factor & biometric
Accounts support two-factor authentication, with Face ID and fingerprint unlock on mobile.
Audit trails
Sensitive changes are logged, giving admins a trail for compliance reviews.
GDPR-ready
Data export and deletion are supported, and a data processing agreement is available.
Four of those claims, one layer down
Each card above makes a short claim. Here is what those claims mean in practice, limited to what we can show you in the product itself. EU hosting and encryption are left out, because they come from the infrastructure Celtucom runs on, not from the app.
What “enforced again at the database” means
An interface that hides a button is a different thing from data that is never served. Celtucom's roles are checked a second time by the database itself, row by row, so a mistake in the interface is not a way in: the screen not showing a colleague's pay and that pay never leaving the database are two different promises.
- Row-level rules sit on the tables, not only in the app
- Your organization's rows are unreachable from another organization's session
- A new feature inherits the restriction rather than having to remember it
An audit trail that covers hours, not only accounts
Logging who logged in is the easy half. The half that matters in a workforce tool is the time entry: someone turned 7.5 into 8.5, and three months later payroll wants to know who and when. Time-log changes are written to the trail alongside the account and profile events.
- Changes to time logs, not just to users and roles
- Readable back as a feed rather than dug out of a database
- Written by the application, so an edit cannot quietly skip it
Two locks, because the phone is the weak point
A workforce app lives on personal phones, and phones get left in vans and on bars. Two-factor authentication guards the account; a biometric lock guards the session that is already open on the device. Finding the phone is not the same as finding the roster.
- Two-factor authentication on the account
- Face ID or fingerprint to unlock the app itself
- Location at clock-in and clock-out is on by default; sharing it is not mandatory
What a procurement review asks next
A data processing agreement is ready to sign and published in full. The sub-processor list is not published (that is deliberate, because a public list of everything a stack runs on is a map for someone else), but it is shared with customers and attached to the signed agreement, and changes are announced in advance.
- DPA published, not sent on request
- Sub-processor list shared with customers, with notice before it changes
- Export and deletion of personal data on request
- A security.txt for reporting a vulnerability
Security documentation
For procurement and compliance reviews. Questions we haven't answered here? We're happy to go deeper in the demo.
Where this touches the rest of the product
Access control is not a separate module bolted on top: it is the same set of roles that decides who may approve a timesheet in the product itself, and who may send an approved period to your payroll package. Those are the two places where a permission mistake costs money rather than embarrassment.
None of it sits behind an enterprise tier. There is one plan, so two-factor authentication, audit trails and role-based access are in it at the price everyone pays. Security that is an upsell is a strange kind of security.
See Celtucom with your own team
Book a walkthrough and we'll show you how it fits the way your organization actually works.