Predah — a statutory break system for computer work

A break program you can explain, deploy, and document.

Predah turns the rules from your risk assessment into a schedule, prompts on Windows machines, and records that do not claim more than the system knows. Employee records stay on your organization's infrastructure.

Windows
Client on workstations, silent MSI install
Two deployment modes
Minimal without activity sensing, full with prompt deferral
Your infrastructure
Employee records on the organization's server
Aggregate views
Groups smaller than 10 are not shown

The obligation

The obligation has existed since 2021. The evidence mostly does not.

The Regulation on the protection of workers exposed to static, psycho-physiological and other workplace strain (NN 73/21) has been in force since 2021. Most organizations have a break policy on paper. Few have a record of its enforcement — and a policy that cannot be evidenced, the moment it matters, does not exist.

Whether this provision applies to a given workplace is established by the employer in the risk assessment. Predah does not make that judgment and does not claim to. It supports the implementation and documentation of Article 17 breaks after you establish applicability.

The full Article 17 explanation →

The binding text, in the original Croatian (NN 73/21, Regulation on the protection of workers exposed to static, psycho-physiological and other workplace strain — Article 17(2)):

„Ako ne postoji mogućnost promjene aktivnosti radnika, odnosno radnik nema spontanih prekida tijekom rada, poslodavac mu je, ovisno o težini radnih zadataka i posljedičnog vidnog i statodinamičkog napora, tijekom svakog sata rada mora osigurati odmore u trajanju od najmanje pet minuta i organizirati vježbe rasterećenja.

How it works

From risk assessment to record

  1. Risk assessment

    Workplace groups from your risk assessment become rule groups in the system.

  2. Rules

    Break duration and frequency, relief-exercise content, deployment mode. Every change publishes a new rule version.

  3. Windows client

    The prompt appears on the workstation. An employee can start, defer, or dismiss it, with no consequence and no rating.

    Rendering of the break prompt in the Windows client — an interface rendering, not a photograph.
  4. Organization server

    Records sync to your infrastructure. The vendor's central system receives only license data and upgrade metadata.

  5. Review

    Aggregate views for HR and legal, a change log for audit.

What the record means

We record less than we could. Deliberately.

example · transparency log · break-session record
10:03 Prompt shown
10:04 Session started
10:09 Countdown completed

The record does not claim the employee performed the exercise. It claims the prompt was shown, that a session was started, and that the countdown ran to completion. Nothing more.

A record that claims "the employee exercised" falls to a single witness who says they pressed start and walked away — and when one field falls, the whole log falls. A record that does not overclaim gives less to dispute; the record's legal weight is for the organization and its counsel to assess.

prompt_shown · started · snoozed · dismissed · expired · timer_completed

Six events. The system records nothing seventh.

Deployment modes

The deployment mode is your legal decision, not our recommendation

Organizations differ in how much legal work they can take on. That is why the deployment mode is a setting you choose at install time, not a product stance. Neither of the two modes is "better."

MinimalFull
Activity sensing none a coarse OS inactivity signal
Defers prompt on inactivity no yes
Eye-break prompts off every 20 minutes, 20 seconds
Break cadence one five-minute break each hour every 30 minutes, 90 seconds
Data-protection impact assessment (DPIA) likely not triggered required
Works-council consent likely not triggered needed

In minimal mode the processing flow does not read inactivity and writes no activity record — the data is not collected, and what is not collected is not sent. In full mode the coarse inactivity signal serves only to defer the prompt. Full mode requires procedures we state openly, because your data-protection officer must run them anyway.

Privacy and data location

Employee records do not go to the vendor's cloud

Organization infrastructure
Controlled by your IT
Windows client employee workstation
Organization server break records repository
Review dashboard aggregate summaries (≥10)
Organization server boundary
Vendor central system
Techpuls infrastructure
License server license & version metadata only

Employee records are stored on the organization's infrastructure. The vendor's central system receives only license data and upgrade metadata.

the line is the boundary — employee data does not cross it.

What we never collect

The list is binding, not a statement of intent.

  • keystroke content
  • screenshots
  • window titles
  • addresses (URLs)
  • application names
  • clipboard
  • camera
  • microphone

Everything that syncs, the employee sees in the in-app transparency log. If it is not in the log, it was not collected.

For every reader

One page, four readers

Legal and management

The Article 17 obligation is specific, and Predah operationalizes and documents it. The record is deliberately conservative: prompt shown, session started, countdown completed. Whether the provision applies is established by you in the risk assessment.

Human resources

A program employees can trust. Everything that is recorded, the employee sees. The prompt can be deferred and dismissed with no consequence and no rating. Views are aggregate — no individual inspection, points, ranking, or comparison, in any view, ever.

IT and the data-protection officer

Employee data stays on the infrastructure you control. Silent MSI install, signed upgrades the organization approves, the ability to roll back to a previous version, an add-only change log, controlled export, and materials for the DPIA.

Works council and union

Nothing is hidden: every synced field the employee sees in the transparency log. The minimal mode exists for exactly this — reminders without any activity sensing. The system does not measure performance, productivity, or attendance, so its data is not usable for decisions about people. The coarse inactivity signal in full mode is stated openly and introduced through the regular procedure.

Read the technical brief for IT and DPO →

Readiness

What a pilot takes

  • A server in your infrastructure
  • Silent MSI install on workstations
  • Deployment-mode choice at install time
  • Materials for the data-protection impact assessment
  • A basis for the work regulation and data categories (Labor Act Art. 29(2))
  • The path to works-council, or union-representative, consent
  • The procedure by which the exercise program is adopted by your occupational-medicine specialist

The relief-exercise program is adopted by your organization's occupational-medicine specialist, under Article 18(3). A vendor attestation does not replace that obligation. Predah builds into the product the procedure by which that adoption is carried out and recorded.

For authorized partners

For authorized occupational-safety companies

Predah does not replace the authorized firm or the occupational-medicine specialist. It gives them an operational layer for deploying and documenting the break program at the client.

Page for partners →

Channel

No authorized firm is listed until there is explicit consent and a measurable source.

Request a pilot conversation

Tell us the organization's size and activity. We will establish the rest in conversation.

Fields marked with an asterisk are required. This form opens a conversation, not a registration.

No self-serve: this form opens a conversation, not a signup.