Security, data protection and compliance.

Infrastructure

Goalplan runs on Google Kubernetes Engine in Frankfurt (europe-west3). Customer records are stored in Cloud SQL for PostgreSQL; high-volume data is separated into per-customer databases. All public traffic is TLS-encrypted via Cloudflare, and storage in Google Cloud is encrypted at rest as part of the managed platform.

Access and authentication

All authorisation is resolved server-side. Individual data is exposed by role — not broadly. Changes to core objects are recorded in a change audit trail. Production access is limited to named engineering staff.

Backup and recovery

Production databases are backed up daily. The restore procedure was tested in January 2026 through an actual restore into a separate database instance — we point to a completed test, not to a policy.

Telemetry

Error and performance data is sent to our observability platform with personal data scrubbed before it leaves the system.

Goalplan processes performance data at the individual level. That is the product — and it deserves clear rules rather than euphemisms.

The purpose is coaching, development and fairer conditions — giving the middle the same support the top already gets. Goalplan is not designed for, and must not be used as, a basis for automated disciplinary decisions. The manager decides; the system shows and suggests.

An employee's detail view is intended for the employee and their manager. The comparison that drives development is against their own history and their own target. Leaderboards are opt-in per competition. Which data points are collected per source system is documented and can be presented to employees and union representatives.

Systematic monitoring of work performance typically requires a data protection impact assessment (DPIA) on your side. We support your DPO with source material: a description of the processing, our technical and organisational measures and our data-minimisation principles. Your DPO makes the assessment — we make sure it doesn't have to start from zero.

AI features in workforce management are classified as high-risk under the EU AI Act, with requirements phasing in through 2026–2027. Goalplan's upcoming AI features are designed against those requirements from the start: human oversight in the design, technical documentation and transparency towards the end user. No AI features are activated for your tenant without documentation and your approval.

Goalplan's core infrastructure: Google Cloud (hosting and data storage, Frankfurt), Cloudflare (TLS and network protection), Amazon Web Services (media, email and SMS delivery) and Sentry (error monitoring). A complete, legally reviewed sub-processor register for Goalplan is being finalised and is provided in the security pack on request.