Security · data protection · co-determination
The page you forward before you buy.
A roster tool touches working time, and in Germany that means the works council has a say under § 87 (1) no. 2 of the Works Constitution Act. This page is written to be read by them, not around them.
What the works council will ask
Six questions, six answers you can check against the product rather than against a promise.
No automated decisions about people
Nurvo does not assess people and does not make employment decisions. The system calculates proposals for who could cover a shift; a roster becomes binding only when an authorised manager confirms it.
Every proposal is checked in advance
Before a draft is shown it is checked against § 3 (maximum working time) and § 5 (rest period) of the German Working Hours Act, the applicable collective agreement, weekly hour limits and qualified-staff ratios. Unlawful assignments are never displayed.
A complete record
For every proposal, the criteria used and the time of approval are logged. That makes co-determination under § 87 (1) no. 2 of the Works Constitution Act reviewable rather than asserted.
Labelled under Article 50 of the EU AI Act
Every AI-assisted output is clearly marked. A dedicated transparency page sets out where language models assist and where only hard-coded rules apply.
Automation levels you set yourself
In the settings, an organisation decides whether rosters are prepared and cover proposed automatically, or whether every single step has to be confirmed by hand. Nurvo can be run in pure proposal mode.
Strict data minimisation
A request to an external staffing agency contains the shift time, the qualification required and the period — nothing else. The name of the person who is ill and any health data are never passed on.
Where each kind of data lives
Two servers in Frankfurt am Main hold what a roster needs. Some things never get that far — they stay on the phone in the nurse's pocket.
Stays on the device
- Bank details and IBAN
- Stored only on the member of staff's own device, for example to prepare a payment. Never transferred to a central server.
- Encryption keys
- The cryptographic keys used for time tracking stay on the local device.
- Language and display
- Individual language settings and display options are stored locally in the browser.
Stored on the server in Germany
- Personal master data
- Names and business contact details of members of staff.
- Rosters and shifts
- Planned shifts, wards, staffing and notes, encrypted with AES-256.
- Time records
- Recorded working and break times, to meet the statutory duty to record hours.
- Leave and shift preferences
- Submitted leave requests, shift preferences and their status.
- Payroll figures
- Gross and net values for the payslip. Bank details are not stored.
Security questions
Where is the data stored?
On two redundant servers in Germany (Frankfurt am Main), to GDPR standards. Shift and planning data are stored encrypted with AES-256.
What never leaves a member of staff's device?
Bank details and IBAN are stored only on the device itself. They are neither transferred to a central server nor included in any report. The cryptographic keys used for time tracking also stay on the device.
Do we need a works agreement for Nurvo?
Whether a works agreement under § 87 (1) no. 2 of the Works Constitution Act is concluded is for the organisation and its works council to decide. Nurvo provides what that decision needs: a complete log for every planning proposal, adjustable automation levels and transparent check rules.
Does the system make automated decisions about people?
No. Nurvo produces staffing proposals. It does not assess people and makes no automated employment decisions. A roster becomes valid only when an authorised manager confirms it.
What is in a request to an external staffing agency?
The shift time, the qualification required and the period. Nothing about the person who is absent — no name, no health data.
Is Nurvo ISO 27001 certified?
The data centres in Frankfurt am Main are certified to ISO 27001. Nurvo as a company is not — it is a young company, the measures described on this page are in place, and an external certification of the organisation is not. We would rather say that plainly than let the data centre's certificate stand in for one of our own. Ask us for the current position before you put it into a tender.
The binding privacy notice and the AI transparency disclosure are German legal documents and exist in German only: Datenschutzerklärung · KI-Transparenz
Walk through it with your works council
We are happy to join a session with your works council or data protection officer and answer questions against the running system rather than a slide.
Already have an account? Sign in