Industries

RestaurantsFloor, kitchen and barHotelsFront desk and housekeepingAll industries
208coded MaRa agreement rules, each with a section reference.See the rulebook

MaRa agreement · depth of support

  • Agreements

    Employees’ agreement · Supervisors’ agreement

  • Employment

    Full-time · Part-time · Variable hours

  • Working-time forms

    Weekly hours · Period work, 3 weeks · Night work · Equivalent to three-shift work

  • Calculation and monitoring

    Rest periods · Additional work and overtime · Evening and night allowances · Midweek holidays · Standby · Annual leave · Local agreements

From a customer

“The best thing the industry has seen.”

Erkka · Ravintolamestarit

Your employee data never leaves Europe.

Rosters, pay details and absences are the most sensitive HR data there is. In Sutja it stays in Finland, and the whole service chain is European.

Rosters, pay details and absences are the most sensitive HR data there is. In Sutja it stays in Finland.

  • Servers in Finland

    The service, database, files and sign-in run in the Finnish provider UpCloud's data centres.

  • Traffic served from EU nodes

    The restriction to EU nodes is written into the data processing agreement, not just promised on a marketing page.

  • Every sub-processor is European

    The list is public, and no US provider ever processes your workspace data.

  • Encrypted at rest as well

    The most sensitive data is encrypted with a key of its own for each workspace, and the master key is never kept in the database.

Everyone sees only what their job requires.

  • Access control

    Role-based access at workspace and team level, on the principle of least privilege.

  • Field-level visibility

    Pay, bank account, address and contract are visible only to the employee, their line of managers and administrators.

  • Change history

    Every change is recorded: who made it, what changed and when.

  • Encryption

    TLS 1.2 or newer in transit. The most sensitive data is encrypted with a workspace-specific key before it is stored.

  • Key management

    The master key is never kept in the database. Keys can be rotated without downtime.

  • Encrypted attachments

    Medical certificates and employment contracts are encrypted, and every download is authorised file by file.

  • Network protection

    DDoS protection, a web application firewall and rate limits before a request reaches the servers.

  • Backups

    Regular backups keep the data safe through disruptions too.

  • Breach notification

    We report a possible breach within 72 hours at the latest.

The paperwork is ready before you ask.

The data processing agreement, the sub-processor list and the privacy policy are public. We provide the appendix on technical and organisational measures on request.

Friday’s crew, all sorted.

Start free with one location. Paid plans from €49 per location per month, unlimited staff.Start free with one location. Unlimited staff.

You're on the list.

We'll email the moment you can get in. We've sent you a confirmation email.

Join the waitlist.

Sutja is opening soon. Leave your email and we'll let you know the moment you can get in.

By submitting you accept our privacy policy.