BDSG-compliant audit logs, Art. 15/17/20 data requests, role-based access and encrypted sensitive fields.
Most companies discover GDPR gaps during an audit. Kern ships with compliance built in — from the database schema to the UI. Your DPO will thank you.
Designed for how HR actually works — not how consultants think it does.
Handle Art. 15 (access), Art. 17 (deletion), Art. 20 (portability) and Art. 16 (rectification) requests end-to-end with status tracking.
Every VIEW_SENSITIVE, EXPORT_DATEV, DELETE_EMPLOYEE action is recorded with actor, timestamp and IP. Never modified.
IBAN, tax ID, SV-Nummer and health insurance details are stored encrypted and accessible only by authorised roles.
SUPER_ADMIN, TENANT_ADMIN, HR_MANAGER, EMPLOYEE, VIEWER. Permissions enforced at every API and UI layer.
Anonymise employee records on deletion request. Personal fields are wiped, aggregate data retained for reporting.
Art. 20 requests generate a structured JSON export of all personal data held. Signed URL, 24h expiry.
An employee or ex-employee submits a data request (access, deletion, portability). The request is logged with timestamp.
HR_MANAGER or TENANT_ADMIN reviews the request, generates the export or triggers deletion, and marks it processed.
Every action taken on the request is added to the immutable audit log. Timestamps, actor IDs, IP addresses.
The requester receives the data export link (24h signed URL) or confirmation of deletion. DSGVO timelines met.
Join hundreds of companies already using Kern. No credit card required.