STAR Registry Listing for
Shiftfy
Shiftfy
Shiftfy is a software-as-a-service product for shift planning, time tracking and workforce management, built for small and mid-sized businesses in Germany, including security companies (§34a GewO).
Functions: rosters and shift swaps, time clock in the browser and via QR clock-in station, absences and leave balances, time accounts, payroll export (CSV and DATEV format), service records with photos and signatures, invoicing, and an optional AI help assistant and AI timesheet recognition.
Deployment: multi-tenant SaaS; tenant separation is enforced in the application. Application hosted by Vercel in Frankfurt am Main; database and file storage by Supabase (AWS eu-west-1, Ireland). Both providers hold ISO 27001 and SOC 2 Type 2.
Scope of this assessment: the Shiftfy web application, its API and the supporting infrastructure, operated by Bashabsheh Vergabepartner together with the sub-processors listed at https://www.shiftfy.de/unterauftragsverarbeiter
Listed Since: 10/17/2026
STAR Level 1
CAIQ Self-assessment v4.1.0
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Created or renewed 2 days ago, on October 17, 2026.
