Hosted in Switzerland
CrewDeck runs in Microsoft Azure in Switzerland. The database sits behind its own key and can be restored up to 35 days back. Processing for the AI features runs on Azure AI.
Time tracking with data protection, without behaviour monitoring
CrewDeck records working time, not behaviour. The application is hosted in Switzerland, every customer sees only their own data, and access requests and logging are built in rather than bolted on.
30 minutes, free, on your own workflows
In short
What does data protection require for time tracking in Switzerland?
Employers may only process personal data that concerns suitability for the job or is needed for the employment contract (Art. 328b CO). Systems intended to monitor behaviour at the workplace are prohibited (Art. 26 ArGV 3), and every person has a right of access to their data (Art. 25 FADP). CrewDeck by Digital Airways therefore records only working time, without location tracking, and is hosted in Switzerland.
| Product | CrewDeck, time tracking and HR software |
|---|---|
| Vendor | Digital Airways GmbH, Basel |
| Law | limits from the Swiss Labour Act with legal reference, public holidays of all 26 cantons |
| Scope | time tracking, absences, expenses, salary overview, recruiting, org chart |
| Delivery | web app in the browser, no installation |
| Hosting | Microsoft Azure Switzerland |
| AI | on click, via Azure AI, never decides on its own, no model training on customer data |
| Sign-in | Microsoft Entra ID, Google Workspace or email, two-factor can be made mandatory |
| Data protection | access requests under Art. 25 FADP as an export, verified change log, no behaviour monitoring |
| Not included | payroll run and shift planning. Working time exportable as CSV and PDF |
Reviewed by Dario Tomas, CEO of Digital Airways, former quality manager for ISO 9001 and 14001. Digital Airways is ISO 9001:2015 certified. Updated .
Where people data is a risk today
- Time tracking apps want access to location or device, and nobody knows exactly why
- People data sits with vendors who do not say clearly where it is stored
- An access request under the FADP means days of searching
- Who changed people data cannot be shown later
CrewDeck
How CrewDeck protects people data
No behaviour monitoring
CrewDeck records working time, not behaviour. There is no screen monitoring, no activity scoring and no location tracking.
Access requests under Art. 25 FADP
When a person requests access, a complete, machine-readable export of their data is produced. CrewDeck deletes rejected applications automatically after three months.
Tenant separation in the database
Every customer sees only their own data. The separation applies at database level and a dedicated test guards it.
Tamper-evident log
Every change is logged in sequence and the chain is recalculated nightly. Technical logs, on the other hand, contain no personal data.
Company account and two-factor
Single sign-on through Microsoft Entra ID or Google Workspace, alongside email and password. Two-factor through an authenticator app can be made mandatory for all members.
What changes for you
- You can tell your employees clearly what is recorded and what is not
- An access request is answered with one export instead of days of searching
- Every change to people data is documented with name and time
- Your people sign in with their existing company account
Download the CrewDeck fact sheet
All modules and features as a compact PDF, straight to your inbox.
By submitting, you agree to our privacy policy.
Frequently asked questions
Where is CrewDeck data stored?
CrewDeck is hosted in Switzerland, and the database sits behind its own key. Processing for the AI features, such as application matching, runs on Azure AI, and your content is not used to train models. Every customer sees only their own data.
May time tracking record location by GPS?
Systems intended to monitor employees’ behaviour at the workplace are prohibited under Art. 26 ArGV 3. Where control systems are needed for other reasons, they must be proportionate. CrewDeck needs no location data and has no location tracking.
How does an access request under Art. 25 FADP work?
Every person can ask whether and which data about them is processed. In CrewDeck this produces a complete, machine-readable export, with all versions and corrections and the details of receipts and documents.
Can employees sign in with Microsoft or Google?
Yes. Sign-in through Microsoft Entra ID and Google Workspace is available, alongside email and password. Two-factor through an authenticator app can be made mandatory for everyone.
Is people data used to train AI?
No. Your content is not used to train AI models. In recruiting the AI works on an anonymised CV, and a person always decides.
Does CrewDeck replace data protection advice?
No. CrewDeck maps the legal requirements technically, such as access requests, roles and logging. It does not replace legal advice, responsibility stays with the employer.
People data in Switzerland, without monitoring.
In 30 minutes we show you how CrewDeck handles access requests, roles and logging, and answer your data protection officer’s questions.
No obligation · 30 minutes · reply within 24 hours
Prefer to write? Send us your request
We reply within 24 hours, guaranteed.