Data Protection Statement

Effective August 2026 · Read together with our Privacy Policy

Job grading data is sensitive: it describes your organisation's structure, roles and remuneration thinking. This statement explains, in plain language, how GradebyJob protects it.

Where your data lives

• All platform data is stored in a managed PostgreSQL database hosted in the European Union (Ireland), operated under enterprise security certifications including SOC 2 Type II.
• The application itself is delivered worldwide through Cloudflare's edge network over encrypted connections.

How it is protected

• Encryption in transit. Every connection to the platform uses TLS. There is no unencrypted access path.
• Tenant isolation. Every company works in its own workspace, enforced by database row-level security. One client's records are invisible to every other client at the database engine level, not merely hidden by the interface.
• Access control. Access is by invitation only: accounts are created against a confidential company join code, seats are limited by licence, and a company administrator controls who is active.
• Two-factor authentication. Any user can add a second sign-in factor (an authenticator app code) to their account under Client Profile, Account Security.
• Auditability. Every saved evaluation records who graded it, when, and with what scores. A certified audit extract with an integrity reference can be exported at any time.

Payments

Card payments are processed by Adumo Online on their secure payment infrastructure. GradebyJob never sees, transmits or stores card numbers.

Regulatory alignment

GradebyJob applies the principles of the EU General Data Protection Regulation (GDPR) and South Africa's Protection of Personal Information Act (POPIA) across the platform: lawful and minimal collection, purpose limitation, security safeguards, and your right to access or delete your information. As Namibian data protection legislation comes into force, the platform will align with it from day one.

Retention and deletion

• Your grading records remain yours and remain available for as long as your licence is active.
• On written request when an engagement ends, we delete a company's workspace data, subject only to records we must retain for financial and legal compliance.
• Demonstration workspaces are temporary by design and are removed in routine clean-ups.