Security & Compliance

Full audit trail

Every action — view, edit, export, delete — is logged with a timestamp and actor, visible in the Compliance module.

Riya Naiduexported candidate list14:02

Thabo M.edited job requirements13:47

Systemflagged document expiry09:15

Amara C.viewed candidate profile08:51

Keys never reach the browser

All AI calls route through a server-side proxy — your API keys and candidate data never touch client-side code.

Role-based permissions

Recruiters, finance, admins, and clients each see only what their role permits — enforced at the view level.

POPIA-aligned consent

Candidate consent is tracked per record, with right-to-erasure support built into the data model.

Document expiry tracking

Work visas, certifications, and contractor documents are flagged automatically before they lapse.

Data minimization

Client portals never expose your internal scoring — only the simplified match tier they need to decide.

Privacy Policy

Last updated: September 2026. Ledger is currently in early-access pilot. This policy will be expanded as the product moves toward general availability.

What we collect: If you submit a demo or sales enquiry form on this site, we collect the name and company/agency name you provide, solely to respond to your enquiry.

What we don't do: We do not sell your information to third parties, and we do not use it for advertising.

Candidate & recruitment data: Data processed within the Ledger platform itself (CVs, candidate records, client information) is governed by your agreement with us as a customer, handled in line with South Africa's Protection of Personal Information Act (POPIA), and is never used to train models outside your own account.