The verdict in three sentences
Employee files sitting on a network share, with permissions inherited for a decade, is the setup German data protection authorities find most often after an HR data breach. A dedicated app with document encryption, role-based access, audit logging and automatic retention periods costs roughly 30,000 to 65,000 EUR (net of VAT) for a mid-size company and ships in 3 to 5 months. Against a fine capped at 4% of global turnover and the cost of a dispute with the Betriebsrat, the business case writes itself.
What regulators object to in a shared file server
The HR director of a Berlin technology and services company, 650 employees across three sites, keeps contracts, amendments, sick notes, appraisals and disciplinary records in a Windows folder tree. Fourteen people have access, including two former interns whose accounts were never disabled. No log shows who opened the file of an employee currently in a labour court case.
This breaches several GDPR principles: no access minimisation (Article 5), insufficient security (Article 32), unlimited retention of data that should be deleted, and no way to answer an employee access request within one month. Health data in sick notes is also special category data under Article 9, and Section 26 of the German Federal Data Protection Act (BDSG) adds employee-specific rules.
| GDPR requirement | Shared file server | Custom HR records app |
|---|---|---|
| Need-to-know access | Folder permissions, rarely reviewed | Roles for HR head, site HR, manager, payroll, employee |
| Security of sensitive data | Plain files on disk | AES-256 at rest, TLS 1.3 in transit |
| Traceability | None, or unreadable system logs | Timestamped log of every view and export |
| Retention periods | Manual, often never applied | Automatic deletion by document type |
| Employee right of access | Manual search over several days | File export in minutes |
| Maximum fine | Up to 4% of global turnover or 20 M EUR | Risk sharply reduced and demonstrable |
Functional scope and 2026 cost
An HR records app is not a full HRIS: it does not replace payroll or time tracking. It secures the document vault and the file life cycle, from hiring to archiving. That focus keeps the budget reasonable.
| Module | Content | Indicative 2026 cost (EUR, net) |
|---|---|---|
| Security core | SSO, two-factor authentication, roles, encryption | 8,000 to 15,000 |
| Employee file | Typed documents, versions, search, summary sheet | 7,000 to 14,000 |
| Retention and deletion | Rules per document type, alerts, interim archive | 4,000 to 8,000 |
| Logging and audit | Tamper-proof log, access dashboard, exports | 4,000 to 9,000 |
| Employee portal | View own documents, GDPR access request | 4,000 to 10,000 |
| Data migration | Import and classification of existing files, QA | 3,000 to 9,000 |
| Total | Delivered in 3 to 5 months | 30,000 to 65,000 |
On top of this comes hosting on a German or EU cloud, ideally C5-attested, at 150 to 400 EUR per month, and maintenance of about 15% of the build cost per year.
Retention rules are the core of the configuration. German practice gives the baseline: payroll records kept 6 to 10 years for tax purposes, application documents of rejected candidates deleted after about 6 months, warnings removed from the file after 2 to 3 years of good conduct. The app applies these rules itself, with human approval before each deletion run.
The works council and the impact assessment
In Germany this is the decisive point. Any system able to monitor employee behaviour or performance requires co-determination under Section 87(1) no. 6 of the Works Constitution Act. An app that logs managers' access to files falls within scope, so you need a works agreement (Betriebsvereinbarung) before go-live. Plan 4 to 10 weeks of negotiation and 3,000 to 8,000 EUR of legal support. A Data Protection Impact Assessment is strongly advised when health data is processed at scale: 3,000 to 6,000 EUR through a consultancy, or 4 to 8 days of the DPO's time internally.
Mini case study
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Katrin, HR director of the Berlin company, models the breach scenario. A former intern leaks the sick notes of 40 employees. Estimated cost: notification and legal support 25,000 EUR, crisis management 15,000 EUR, and a possible fine for a company with 120 M EUR turnover of 0.1 to 0.5% in practice, so 120,000 to 600,000 EUR, before labour court claims.
The selected project costs 52,000 EUR to build plus 280 EUR per month of hosting, about 62,000 EUR over three years with light maintenance excluding hosting. It also saves time: access requests drop from 2 days to 30 minutes, and the HR team recovers about 6 hours a week of document searching, close to 280 hours a year.
FAQ
Must we host in Germany?
GDPR allows any EU location, but many German works councils and DPOs insist on German data centres. The premium over a standard EU region is usually 10 to 25% of the monthly bill.
Can the app connect to our payroll software?
Yes, through an API or secure file exchange. A simple interface with a standard German payroll package costs 3,000 to 7,000 EUR to develop.
Does encryption slow down search?
Not with the right architecture: indexed metadata stays searchable and only the documents are encrypted. Searching 50,000 files stays under one second.
Who holds the encryption keys?
Ideally a key management service separate from the application host, with annual rotation. It adds 30 to 80 EUR per month but protects data even if the server is compromised.
How long does migration take?
For 650 employee files and about 30,000 documents, migration takes 3 to 5 weeks, including manual classification by the HR team.
Let's scope your project. Tell us about your HR organisation and sites: we define roles, retention rules and the migration plan over 3 to 5 months. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
