Skip to content

Data protection

HR data requires clear control.

blueprnt is designed for GDPR-conscious handling of HR data, with a focus on data control, transparency and storage within the EU.

  • Customer data is stored and processed within the EU (Ireland).
  • The customer keeps control of their data.
  • The platform is designed for GDPR-conscious handling of HR data.
  • Access to data is governed by permission and security measures.

In the platform

Protection is built in

  • Data within the EUStorage and hosting in Ireland, the AI model in France.
  • Two-step sign-inRequired for every user at every sign-in.
  • Audit logEvery change is saved with who, what and when.
  • Locked pay mappingsThe figures are frozen when the pay mapping is closed.
  • AI that suggests, never decidesAI never sets a score, a weight or a level, and it receives no personal data.
  • Right to erasureEmployees can be deleted, and their history is pseudonymised.

Separate data flows

Website data and customer data are kept apart.

Enquiries from the website reach us by email and are not stored in any database. Customers' HR, employee and pay data is processed in blueprnt's production platform and stored and processed within the EU (Ireland). Customer data never passes through the website's contact form.

Read our privacy policy

Roles and responsibilities

The customer controls the processing of their HR data.

When a customer uses blueprnt for data about employees, roles, salaries or compensation, the customer is normally the data controller. blueprnt normally processes the data as a data processor and on the customer's instructions.

Read more in the privacy policy

What we can describe

How the data is handled

  • Data within the EU

    Customer data in the blueprnt platform is stored and processed within the EU (Ireland). Our hosting and database providers have US parent companies, and transfers of operational data are covered by the European Commission's standard contractual clauses.

  • Secure handling of data

    blueprnt works continuously on security, access control, updates and the handling of security risks. The platform's technical safeguards limit access to authorised users.

  • Technical platform

    blueprnt uses technical services to run the platform, database and authentication. We are responsible for how the service is designed and how customer data is handled within our delivery.

  • Personal data and rights

    How blueprnt processes personal data, what rights you have and how long data is kept is described in our privacy policy.

  • No cookies

    The website sets no cookies. Visit statistics are collected without cookies, and we do not sell any data.

  • Report a security issue

    If you discover a possible vulnerability or have questions about security, reach us at hello@blueprnt.se.

Security and control are part of the set-up.

We prepare and share documentation on data processing, access and incident handling in connection with the agreement.

The information on this page describes our current practices and platform capabilities. It is not an independent certification or legal advice.

Questions about data handling?

Get in touch and we will tell you more about how blueprnt handles HR data.

Book a walkthrough

Or email us at hello@blueprnt.se