Pretorix
German occupational health and safety platform bundling 16 integrated modules, from risk assessment to hazardous-substance registers. Built-in AI drafts operating instructions, question catalogues and checklists, with customer data held on German servers.
What is Pretorix?
Pretorix is a German occupational health and safety platform, delivered as software as a service by Pretorix GmbH in Burladingen, Baden-Württemberg. It gathers the duties a German employer owes under ArbSchG, GefStoffV, BetrSichV, ArbMedVV and the DGUV rules into a single system of 16 integrated modules, grouped into core safety, people and training, incidents and documentation, and platform administration. Every module is included in every package, so nothing is held back behind a tier.
The core of the product is the chain that runs from hazard areas to risk assessment, risk management and operating instructions. Risk assessments are created from main and partial templates, scored - the Nohl matrix and the STOP principle are both supported - approved, and turned automatically into corrective measures. The hazardous-substance module keeps a digital register of more than 70,000 substances: a safety data sheet is uploaded as a PDF, read automatically, checked against REACH and CLP, assessed with the EMKG method and turned into an operating instruction within one workflow.
Artificial intelligence is functional here, not decorative. It writes whole operating instructions, in six types and with matching pictograms, drafts question catalogues for risk assessments and produces checklists. A separate AI assistant answers occupational safety questions directly.
Around that sit the people-facing modules: personnel records, instruction sessions delivered on site, online or on arrival with knowledge tests and certificates, qualification tracking, and occupational health screenings under ArbMedVV. Incidents are covered by accident reporting with the DGUV notification form and automatic indicators such as LTIF and the 1000-employee rate, alongside a digital first-aid logbook. A traffic-light system runs through every people-related module, and a real-time dashboard of modular widgets exports to PDF for audits.
Administration is built for scale: unlimited organisational levels, inherited permissions, strict multi-tenancy, sign-in through Google or Microsoft/Azure AD with SSO enforceable for everyone, and two-factor authentication. That tenancy model is aimed squarely at external safety consultants, who can switch between client companies without signing in again and share templates across all of them. Customer data is held on Microsoft Azure servers in Germany, and an Android companion app lets employees read instructions and report risks.
What it does
- Generate complete operating instructions by AI, section by section or in full, pictograms included, in seconds rather than hours
- Generate question catalogues for risk assessments and inspection checklists by AI
- Answer occupational safety questions through a built-in AI assistant
- Read PDF safety data sheets automatically and import them into the hazardous-substance register
- Create, score and approve risk assessments with measures derived automatically
- Plan, run and evidence instruction sessions on site, online or on arrival, with knowledge tests and certificates
- Track every statutory deadline through a traffic-light system with automatic reminders
When to use Pretorix / When not to
A quick filter to help you decide if Pretorix is the right fit.
When to use Pretorix
- In-house occupational safety specialists (Fachkraft für Arbeitssicherheit) who spend more time documenting than preventing
- External safety consultants and inter-company services managing anywhere from 5 to 500 client companies from one tenant-separated account
- HSE and safety managers in industrial and production sites governed by ArbSchG, GefStoffV and the DGUV rules
- Managing directors of German SMEs personally liable for undocumented safety duties
- HR and training coordinators tracking instructions, qualifications and occupational health screenings across a workforce
When not to use Pretorix
- Private individuals: the terms state outright that Pretorix serves businesses only and accepts no consumers under § 13 BGB
- Organisations operating outside German safety law, since the site, the product and the whole regulatory framework are German
- Buyers who need to see a price before talking to anyone, as no pricing page and no figure exist anywhere on the site
- Development teams looking for a documented public API to build on
- iPhone-equipped field teams, because the only mobile app published is an Android one
How to use Pretorix
A typical end-to-end flow, from setup to results.
- Request a free demonstration or get in touch through the contact page; the company undertakes to reply within one working day
- Register to open the 30-day trial, which starts on sign-up and needs no credit card
- Work through the interactive onboarding included in the trial
- Build the organisational structure: company, sites and departments, across as many levels as needed
- Assign employees to the organisational levels they belong to
- Grant roles and permissions module by module, from safety administrator to area supervisor
- Switch on single sign-on through Google or Microsoft/Azure AD and enable two-factor authentication
- Import ready-made templates from the marketplace, choosing an industry and picking the hazards, substances and instructions needed
- Create hazard areas, then the risk assessments that hang off them, letting measures be derived automatically
- Upload PDF safety data sheets to populate the hazardous-substance register, then schedule instructions, screenings and deadlines and follow them on the dashboard
Pros & Cons
Pros
- Customer data stays on German servers, with AI features run inside the European Union
- Regulatory coverage is explicit and detailed, naming ArbSchG, GefStoffV, BetrSichV, ArbMedVV and the DGUV rules
- Every module is included in every package, so no capability is withheld behind a higher tier
- The 30-day trial is complete, needs no card, and stops by itself rather than rolling into a subscription
- The multi-tenant design genuinely fits external safety consultants, who switch between clients without re-authenticating and share templates
- AI removes a heavy drafting burden, producing operating instructions and question catalogues in seconds instead of hours
- Every processor is named individually in the privacy policy, with Article 28 agreements declared
Cons
- No price is published anywhere: there is no pricing page at all, and nine of the usual pricing paths return the same 404
- The product and the site are entirely in German, and the regulatory coverage stops at German law
- The interface is advertised in 24 languages but not one of them is named anywhere on the site
- No public API documentation exists, despite the homepage advertising open interfaces
- There is no iOS app; only an Android companion app is published
- No security certification of the vendor's own - ISO 27001, SOC 2 or TISAX - is claimed anywhere
- Paid extras run on prepaid credit capped at 5,000 EUR, and no permanent free plan exists once the trial ends
Pricing & Plans
No price is published. The site carries no pricing page whatsoever, and the vendor's terms simply refer to "the prices in force at the time of the order" for both the Pretorix subscription and the premium services. Registration, access and the base services are free during a 30-day trial period that begins on sign-up, requires no credit card and ends automatically without becoming a subscription. There is no permanent free plan, although the marketplace protection guides are supplied free of charge. Premium services are paid from a prepaid balance topped up to a ceiling of 5,000 EUR; that figure is a top-up limit, not an entry price. All prices are quoted exclusive of VAT. Obtaining a figure requires contacting the company.
- 30 days
- free
- full access to all 16 modules
- no credit card
- ends automatically
- the base services
- priced at the time of order
- no figure published
- paid extras such as safety templates and document conversion
- drawn from a prepaid balance capped at 5
- 000 EUR
Data, GDPR & hosting
A consolidated view of how Pretorix handles your data.
GDPR overview
Implementation is concrete rather than declarative. The site states repeatedly that processing follows the GDPR, and backs it with a fifteen-section privacy policy dated August 2026. Legal bases are named article by article (Art. 6(1) a, b, c and f), and the full catalogue of data-subject rights is set out, including portability, objection and complaint to a supervisory authority. Article 28 processing agreements are declared with each named processor - Hetzner, Microsoft and Google - and with the employer for the SaaS. The website's AI assistant is covered separately, with the assurance that its data never leaves the European Union. A DSA contact point answers in German and English at datenschutz@pretorix.de. The only non-EU transfer disclosed concerns website analytics, under the EU-US Data Privacy Framework.
Who owns the data?
For the SaaS itself, ownership sits with the customer, not the vendor. The privacy policy is explicit: the controller within the meaning of the GDPR is the employer, not Pretorix GmbH, which acts purely as a processor "exclusively on its instructions" under an Article 28 processing agreement. Employees are told to address access, correction or deletion requests to their employer first; anything sent to Pretorix is forwarded on. The customer can extract its own records at will, exporting evidence as PDF for auditors and authorities. The terms reserve to the vendor the software, its content and its templates, and forbid reselling or commercially exploiting the platform.
Reuse rights
The customer remains the controller and decides what its safety records are used for. Data can be pulled back out without asking: dashboards and evidence export to PDF in one click for auditors and public authorities, and reports carry the customer's own logo. Templates - question catalogues, protection guides, operating instructions - are imported, edited and reused freely, and the protection guides are supplied free of charge. External safety consultants may build templates centrally and push them out to every company they look after. What the terms withhold is commercial exploitation: reselling Pretorix, or the content delivered with it, for payment is prohibited.
Data retention & training
Hosting summary
Hosting is German first and European throughout. For the SaaS, Microsoft Ireland Operations Ltd acts as processor: the application, its databases and its file storage run in the Azure Germany West Central region, whose data centre is in Frankfurt am Main. The programming interface through which the mobile app talks to those systems runs in the West Europe region, still inside the EU. Document conversion is deliberately not outsourced - it runs on the vendor's own infrastructure at Hetzner Online GmbH in Nuremberg, with no transmission to any external conversion service. The website and its attached services, including the chat assistant, are hosted at Hetzner in Nuremberg as well, while form submissions land in an Azure SQL database and media in Azure Blob Storage, both on German servers. Analytics is self-hosted and cookie-free in Germany. The one disclosed transfer outside the EU concerns Google Analytics and Google Tag Manager, covered by the EU-US Data Privacy Framework, and it applies to the website rather than to the platform.
Things to keep in mind
Risks and trade-offs to weigh before adopting Pretorix.
- AI-generated safety documents do not transfer liability: responsibility under ArbSchG and GefStoffV stays with the employer, so every generated operating instruction still needs a competent human review before it is issued
- The vendor itself warns that its AI assistant's answers may contain inaccuracies and are not legally binding information
- Occupational health data - medical screenings, accidents, first-aid entries - is sensitive by nature and ends up concentrated in a single system kept for up to ten years
- The vendor's own terms point to pretorix.com as the operating address and to an email on that domain, yet that domain does not resolve at all; the real site and contact both sit on pretorix.de
- The terms and the privacy policy are from different generations, dated August 2025 and August 2026, and the terms also carry a phone number and a postcode that contradict the legal notice
- No price being published means the true cost of ownership cannot be assessed before entering a sales conversation
- Relying on a very small vendor for a decade-long compliance record concentrates operational risk worth planning around
Setup & Integrations
Technical difficulty
Low on the technical side, moderate on the organisational one. Pretorix is browser-based with nothing to install, and registration is self-service with interactive onboarding included in the trial. No developer skills are needed and there is no API to integrate. The real work is configuration: mapping the company, sites and departments across organisational levels, assigning staff, and setting roles and permissions module by module. Optionally, single sign-on through Google or Microsoft/Azure AD has to be wired up. Ready-made marketplace templates shorten the start considerably, so the difficulty is a safety-management one rather than an IT one.
Deployment
Apps stores
Integrations
Supported languages
Behind Pretorix
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What is Pretorix?
Where does artificial intelligence actually come into it?
Where is the data hosted?
How much does Pretorix cost?
Is there a free trial?
Is there a permanent free plan?
What languages are supported?
Is there a mobile app?
Does Pretorix offer an API?
How long is data kept?
Should you pick Pretorix?
Pretorix is a narrow product that knows exactly what it is. It does not try to be a general-purpose assistant: it digitises the duties a German employer owes under national occupational safety law, and it does so across sixteen modules that are genuinely wired together rather than merely listed side by side. The AI is real and load-bearing - drafting operating instructions, question catalogues and checklists, and reading safety data sheets - which is what lifts it above a filing system with a chatbot bolted on.
Its strongest argument is sovereignty. Customer data sits on Azure servers in Germany, AI functions run inside the EU, document conversion is deliberately kept in-house rather than sent to an external service, and every processor is named in the privacy policy with an Article 28 agreement declared. For a German safety officer handling occupational health records, that is not a marketing detail. The multi-tenant design for external consultants is equally well judged, and including every module in every package removes a familiar source of friction.
The reservations are real too. No price is published anywhere, so the cost cannot be assessed without a sales conversation. No security certification of the vendor's own is claimed. The twenty-four interface languages are asserted but never named. And the vendor is small - a family-run GmbH with 25,000 EUR of capital and a handful of named people - which is worth weighing when the system will hold a decade of occupational health records.
One nuance deserves stating: the software is older than the company. The first version shipped in 2015 inside another firm, IT Docs GmbH, and Pretorix GmbH only entered the commercial register at the end of 2022, with the cloud edition going live in 2026. Buyers get mature expertise in a young legal entity.
- Choosing a selection results in a full page refresh.
- Opens in a new window.