--- title: "Security" description: "Security overview for Minutezilla with details about roles, hosting, desktop capture, and data controls for Germany-focused teams." language: "en" lastmod: "2026-10-12" canonical: "https://minutezilla.com/en/security/" source: "generated" generator: "TYPO3 si_llms_txt" --- Security # Security and control for time, attendance, and HR data. Minutezilla is built for German teams that need clean records for work hours, leave, and reporting. That is why we treat security, roles, and data access as part of the product, not an afterthought. ![Two team members review protected access to time and HR data beside a shield and lock.](https://minutezilla.com/fileadmin/user_upload/comparisons/minutezilla-security-theme.webp) **In brief:** Minutezilla protects time, attendance and HR data with role-based access for admins, managers and members, encrypted transfer over HTTPS and token-based authentication. Hosting is in the EU. The optional desktop companion collects metadata only – no screenshots, no keystrokes, no clipboard. ## What this page covers This overview explains how Minutezilla currently handles access, hosting, transmission, desktop collection, and data control. If your team needs deeper detail, you can contact us directly. ### Role-based access Admins, managers, and members only get the areas they need for their jobs. Workspace access and HR-adjacent views are controlled separately. ### Hosting in the EU Minutezilla is hosted in a data center in the EU (Finland) and is aligned with German and European data protection expectations. Product communication and contracts are designed for a German business context. ### Encrypted transport Access to the web app runs over HTTPS. Authentication and API access are token-based so sessions and requests are handled in a controlled way. ### Control over your data Teams can export entries, generate reports, and remove data when needed. Minutezilla is designed so your work data stays accessible to your team. ## Current protection areas ### Web app and API Authentication, protected workspace routes, and role-based areas for standard usage, team administration, and HR features. ### Desktop companion The desktop client is designed for metadata-only collection. No screenshots, no keystrokes, no clipboard capture. ### Time and HR workflows Attendance, leave, overtime, and reporting stay inside the same role and workspace boundaries instead of being split across shadow tools. ### Export and traceability Reports and time entries can be exported for payroll, internal review, or documentation without stitching data together across multiple systems first. ## Privacy-aware desktop collection When the desktop companion is used, it is intentionally limited to activity metadata. That means app name, window title, browser domain, timestamps, and idle status. No screen recordings and no content from documents or messages. - No screenshots or screen recordings - No keylogging or clipboard capture - Pause and exclusion rules for user control - Syncs through the same workspace logic as the web app ## Built for German teams Minutezilla is shaped around the things German companies regularly need in practice: privacy-aware data handling, traceable work-hour records, clear team roles, and exportable reports instead of opaque black boxes. Time tracking with projects, clients, and roles Attendance, breaks, and leave workflows in one system Reports for payroll, managers, and internal documentation Clear access instead of shared logins or shadow exports ## Questions about security or privacy? If your team needs a more detailed answer on hosting, desktop collection, roles, or data flows, you can contact us directly. Security questions to [Contact us](mailto:kontakt@minutezilla.com "Contact us") [Open Minutezilla](https://app.minutezilla.com "Open Minutezilla")