Can a company be penalized for its employees' use of WhatsApp?

Yes. The employer stays responsible for the data its teams process, even on personal accounts (art. 4 GDPR). Health data, payment data, customer images shared on WhatsApp: this sometimes moves into a special category (art. 9), and both the CNIL and the ICO have already sanctioned these uses. Roomee is the channel designed to support GDPR compliance, hosted in Europe, as a documented alternative.

Where exactly does the data live, and what about Noah?

The product infrastructure is hosted in Europe (Frankfurt), encrypted (TLS in transit, AES-256 at rest), designed to support GDPR compliance. Subprocessors are bound by a DPA; some operate outside the EU under the EU-U.S. Data Privacy Framework and standard contractual clauses — public list at /legal/sous-traitants. Noah, the AI built into Roomee, relies on Claude (Anthropic, US cloud) for inference: a processing step separate from where your data is hosted. And your content doesn't train any model.

How do you authenticate teams with no work email or Active Directory?

Sign-in happens with a personal email or a phone number. No work address, no AD account. No MDM, no geolocation, no access to the phone's contacts. On the Group plan, SSO (SAML, OIDC) connects your existing directory. And that's it.

Are SSO, an API and HR connectors available?

On the Group plan: SSO (SAML, OIDC), a REST API + webhooks, full export, HR/payroll/scheduling connectors (Lucca, Payfit, Combo, Skello). On the Pro plan: a read-only API and export included. Roomee lives alongside your stack — it doesn't create one more silo. Pricing is per location, not per user: the Essential, Pro or Premium tier follows team size (up to 30, 60 or 120 team members). We price it to your scope — a quote within 24 to 48 hours. With two or more locations, the Group plan takes 20% off per location. Essential with no commitment; Pro and Premium on 12-month terms, with 2 months free on annual billing.

How do you revoke access on the day an employee leaves?

Revocation happens in one click, and stays traceable (audit logs). The org chart follows the directory: a departure becomes an open role, the history stays with the successor. No zombie accounts, full export in one click. No lock-in.

Is Roomee ISO 27001 certified?

The data centers and infrastructure subprocessors are ISO 27001 certified. Roomee's own certification is in progress, targeted for the third quarter of 2026: a commitment underway, not a done deal.

Roomee for IT: the governed WhatsApp alternative, hosted in Europe, designed for GDPR

Lyon group Front of house Nice venue My floor

Roomee perimeter

Front desk
Kitchen
Housekeeping
Storeroom

One more tool to manage?
No. A tool teams open on their own — and that's it.

1,200 team members open Roomee before 9 a.m. to read the briefs and plan their day.

The frontline didn't go around IT. It just took the fastest option.

Your managers spend 40 minutes a day on average chasing, repeating, asking again — because they never know who's actually seen it.

Internal audit.

A former employee, gone three months ago, is still in one location's WhatsApp group — and the same setup exists on thirty-two others. How many groups? Who's in them? What data? Nobody at head office knows. Every manager picked the tool that was fastest to launch, and that's it.

The result: data outside your perimeter, access never cut off, GDPR compliance out of your hands. And the risk stays with you.

Dozens of ungoverned WhatsApp groups, with a former employee's access still not cut.

You judge Roomee through the lens of risk, not convenience.

What an IT leader has to clear before approving a tool the frontline already uses — on WhatsApp, without them.

Your work data, outside the legal perimeter.

Instructions, photos, history: it all lives on personal accounts. The company loses ownership of its data. And control over GDPR with it.
One more tool, one more silo.

Mid-market IT won't accept a SaaS that fits neither the directory nor the HRIS and forces an integration project. Without SSO or an API, adoption dies before it starts.
BYOD, yes. An acceptable MDM, no.

Almost none of the frontline has a work email or a company device. Force an MDM onto personal phones? Massive support load and a legal gray area.
Zombie accounts with every departure.

One departure a month, no controlled revocation. The result: access left open for weeks, history lost, exfiltration risk.
Three chat apps per team, out of control.

WhatsApp, Messenger, Slack, Drive: each a contract outside IT, each a gray area under GDPR — and no audit visibility.
An outage in the middle of the rush.

One outage during service, and the whole location grinds to a halt. You demand a documented SLA and a status page — not “best effort.”

Sensitive data travels on personal accounts. Out of your hands.

A photo of a room, an admission slip, a card number: on WhatsApp, this kind of processing sometimes falls under a special category (art. 9 GDPR). Outside any framework, on accounts you don't control. France's CNIL already calls these uses “potentially sanctionable.” And the employer stays responsible.

Roomee. A company channel — messages, files, briefs — hosted in Europe (Frankfurt), encrypted (TLS / AES-256), designed to support GDPR compliance, with subprocessors bound by a DPA. Nothing lives on the employee's phone. The data moves into an auditable perimeter. Yours.

Front desk · Evening brief

Tonight’s VIP arrival procedure — please approve before 6 PM.

PDF vip_procedure.pdf

Your teams have neither a work email nor an Active Directory account.

Out of 1,800 people to equip, the AD directory covers 220. The rest — front of house, housekeeping, delivery, care — have no named address. A work email, a required MDM, SSO from day one: most drop off before they've started. The app caps out at 40% adoption.

Roomee. Sign in with a personal email or a phone number. No work address. No MDM, no geolocation, no access to contacts. On the Group plan: SSO (SAML, OIDC), a REST API and export for advanced governance. Teams adopt it fast. Without invasive tech.

roomee

+33 6 •• •• •• 24

LD Léa Dubois Connected · Front desk

No MDM
No location tracking
No access to contacts

Offboarding is the real governance test.

A tool is governable if leaving is simple. Otherwise it breeds zombie accounts: an audit that turns up employees gone for months, still active, because nobody knew which groups they'd been invited to. On WhatsApp: no inventory, no log, no way to cut access.

Roomee. An inventory of spaces per location, audit logs, MFA, one-click revocation on departure. The org chart follows the directory: a departure = an open role. The history stays for the successor, and a full export takes one click. No lock-in. The exit is as clean as the entrance.

Marc Tessier Head waiter · Lyon location

Access revoked

Org chart · Front of house Head waiter

Access revoked · 2:32 pm · by Admin

No zombie accounts · export retained

Instructions no longer sit on personal phones, and when someone leaves, the history stays with us . The exit is clean.

Hugo Cassaro Head of Operations · Cassaros

Frequently asked questions — IT

Can a company be penalized for its employees' use of WhatsApp?

Yes. The employer stays responsible for the data its teams process, even on personal accounts (art. 4 GDPR). Health data, payment data, customer images shared on WhatsApp: this sometimes moves into a special category (art. 9), and both the CNIL and the ICO have already sanctioned these uses. Roomee is the channel designed to support GDPR compliance, hosted in Europe, as a documented alternative.
Where exactly does the data live, and what about Noah?

The product infrastructure is hosted in Europe (Frankfurt), encrypted (TLS in transit, AES-256 at rest), designed to support GDPR compliance. Subprocessors are bound by a DPA; some operate outside the EU under the EU-U.S. Data Privacy Framework and standard contractual clauses — public list at /legal/sous-traitants. Noah, the AI built into Roomee, relies on Claude (Anthropic, US cloud) for inference: a processing step separate from where your data is hosted. And your content doesn't train any model.
How do you authenticate teams with no work email or Active Directory?

Sign-in happens with a personal email or a phone number. No work address, no AD account. No MDM, no geolocation, no access to the phone's contacts. On the Group plan, SSO (SAML, OIDC) connects your existing directory. And that's it.
Are SSO, an API and HR connectors available?

On the Group plan: SSO (SAML, OIDC), a REST API + webhooks, full export, HR/payroll/scheduling connectors (Lucca, Payfit, Combo, Skello). On the Pro plan: a read-only API and export included. Roomee lives alongside your stack — it doesn't create one more silo. Pricing is per location, not per user: the Essential, Pro or Premium tier follows team size (up to 30, 60 or 120 team members). We price it to your scope — a quote within 24 to 48 hours. With two or more locations, the Group plan takes 20% off per location. Essential with no commitment; Pro and Premium on 12-month terms, with 2 months free on annual billing.
How do you revoke access on the day an employee leaves?

Revocation happens in one click, and stays traceable (audit logs). The org chart follows the directory: a departure becomes an open role, the history stays with the successor. No zombie accounts, full export in one click. No lock-in.
Is Roomee ISO 27001 certified?

The data centers and infrastructure subprocessors are ISO 27001 certified. Roomee's own certification is in progress, targeted for the third quarter of 2026: a commitment underway, not a done deal.

Book a demo (20 min)

Messaging

It stays with the company, not the phone. Hosted in Europe.

Mobile app

BYOD without MDM, without a work email. Access cut in one click.

Org chart

Directory-synced: a departure, an open role.

An app teams actually use. Governance IT can accept.

A tailored demo: we show you where the data lives, offboarding in action, and SSO wired into your directory.

Request a demo

Your teams adopt it, IT keeps control.

One more tool to manage?
No. A tool teams open on their own — and that's it.

The frontline didn't go around IT. It just took the fastest option.

Internal audit.

You judge Roomee through the lens of risk, not convenience.

Your work data, outside the legal perimeter.

One more tool, one more silo.

BYOD, yes. An acceptable MDM, no.

Zombie accounts with every departure.

Three chat apps per team, out of control.

An outage in the middle of the rush.

Sensitive data travels on personal accounts. Out of your hands.

Your teams have neither a work email nor an Active Directory account.

Offboarding is the real governance test.

Frequently asked questions — IT

Explore next

Messaging

Mobile app

Org chart

An app teams actually use. Governance IT can accept.

One more tool to manage?No. A tool teams open on their own — and that's it.

Internal audit.

Your work data, outside the legal perimeter.

One more tool, one more silo.

BYOD, yes. An acceptable MDM, no.

Zombie accounts with every departure.

Three chat apps per team, out of control.

An outage in the middle of the rush.

Sensitive data travels on personal accounts. Out of your hands.

Your teams have neither a work email nor an Active Directory account.

Offboarding is the real governance test.

An app teams actually use. Governance IT can accept.

One more tool to manage?
No. A tool teams open on their own — and that's it.