CSA STAR Registry
Security, Trust, Assurance, and Risk Registry
Listings for Bashabsheh Vergabepartner
Bashabsheh Vergabepartner (Mannheim, Germany) operates Shiftfy, a cloud service for shift planning, time tracking and workforce management for small and mid-sized businesses in Germany. Shiftfy runs as a web app; an iPhone app is in preparation.
- Hosted in the EU: application in Frankfurt am Main, database and file storage in Ireland
- Data processing agreement (Art. 28 GDPR) with every customer; sub-processors listed publicly
- Encryption in transit (TLS) and at rest; sensitive fields additionally encrypted in the application (AES-256-GCM)
- Two-factor authentication (TOTP) available to all users
- Security and privacy information: https://www.shiftfy.de/sicherheit
This entry is a STAR Level 1 self-assessment based on CAIQ v4.1. It is not an audit or certification.
Shiftfy
Shiftfy is a software-as-a-service product for shift planning, time tracking and workforce management, built for small and mid-sized businesses in Germany...
Listed Since: 2026-10-17
CAIQ
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).