Haufe Talent vs rexx systems

Haufe Talent

The evidence confirms only that 'Haufe Digitale Personalakte' exists as a product — not one word on org structure, custom fields, or effective-dated change history. History is the difference between a file and an audit trail, and I cannot credit a capability the evidence does not show.

rexx systems

The digital personnel file is substantial: complete historization and revision-safe archiving, salary development and cost-centre data held in the record, personnel documents generated straight into the e-file, batch scanning of paper files, and organisational management that covers subsidiaries. What I could not find on the captured pages is field-level permission control, effective-dated contract and compensation versions, and retention rules per document type — the difference between a good file and one an auditor can defend.

Haufe Talent

No payroll path is stated anywhere: no DATEV, no named system, no export format, no mid-month handling. Despite the vendor's payroll heritage, this sheet proves nothing about how the month closes into payroll, so as far as I can see somebody retypes it.

rexx systems

This handoff is built as a partnership: official DATEV interface partner status covering Lohn und Gehalt and LODAS, bidirectional transfer of master data, variable pay and absences with change-based delta synchronisation, payslips and tax certificates returned monthly into employee self-service, and further named connections to ADP, Paisy and SAP HR. We found no public information on a documented pre-payroll check, retro-accounting for backdated changes, or an approval and lock step before transmission.

Haufe Talent

Entirely silent on vacation, sickness, and working-time recording — no absence feature, no ArbZG/BAG 2022 recording duty, nothing. For a duty the employer cannot delegate, absence of evidence is a finding, not a neutral.

rexx systems

Working-time capture is real and multi-channel — browser, app, terminals with QR code or NFC, multiple time accounts, shift and overtime models, pro-rata entitlement on mid-year joiners and leavers, electronic sick certificates imported and matched to absence bookings, and a complete online history of every booking. For the German recording duty the captured pages stop short of the specific answers I look for: we found no public information on public-holiday calendars per location, break and rest-period rules, or works-council-configurable monitoring limits.

Haufe Talent

No applicant tracking, no onboarding flow, and critically no applicant retention or deletion story at all. Applicant data that does not delete itself on a stated date is exactly my red line, and here I cannot even find a promised one.

rexx systems

The join path runs end to end: multiposting to named boards including finest-jobs.com and the Bundesagentur, scorecards plus video and WhatsApp channels, digitally signed contracts with automated rejections, and applicant data flowing into an onboarding module that assigns tasks, timelines and equipment without re-entry. The six-month applicant deletion deadline with consent-based extension appears in the vendor's own privacy policy for its own hiring; we found no public information on automated applicant deletion at a configurable deadline inside the product.

Haufe Talent

No published DPA, no retention periods, no deletion mechanics, no role model, and the pipeline marks subprocessor exposure 'unknown'; the privacy-policy page yielded no data-protection facts. An unpublished DPA is a finding, and this sheet gives me nothing to soften it.

rexx systems

Here I must record findings: we found no public information on a signable data processing agreement, no published subprocessor list for the product, and no evidence that employee-data retention or deletion executes on defined dates rather than ending as revision-safe archiving the customer administers. Encryption, role rights and an audit trail are named, operations are ISO 27001:2022-certified in German and Swiss data centres, and the privacy policy does state automatic deletion for website analytics — but for the most sensitive data about people who cannot decline the processing, that is thin.

Haufe Talent

Every sovereignty attribute is unknown — no stated data residency, no named subprocessors, no verified contracting entity — which is exactly the undocumented chain I refuse to assume. Provenance placing the vendor in Freiburg is the only documented fact keeping this off the floor; a German address is not a hosting region.

rexx systems

The foundations are European: a Hamburg contracting entity with a German register number, hosting in the vendor's own cloud on German and Swiss servers in ISO-certified data centres, and a genuine on-premises option. The chain is where it weakens — the data-centre provider behind the own cloud is not named, we found no public information on product subprocessors or on the vendor's ownership, and the imprint lists Austrian and Swiss sister entities without stating which of them signs customer contracts.

Haufe Talent

No price of any kind appears on the captured pages: no per-employee rate, no tiers, no billing period, no minimums. An HR lead cannot compute even a rough annual invoice from this.

rexx systems

The pricing page states the software is calculated "individuell und nachvollziehbar" with no standard packages, and even the preconfigured entry package for smaller companies — 32 consulting hours and eight training hours — carries no figure. No per-employee price appears on the captured pages; an HR lead cannot compute one euro of the annual invoice from public information.