Your Data, Protected
skillSYMS is built with security and POPIA compliance at its core. We take data protection seriously so you can focus on skills development.
POPIA Compliant
Built for South African privacy law
Encrypted Data
AES-256 at rest, TLS in transit
Audit Trail
Every action logged and traceable
Edge Security
Cloudflare global protection
POPIA Compliance by Design
The Protection of Personal Information Act (POPIA) governs how personal information must be processed in South Africa. skillSYMS is designed from the ground up to help you meet your obligations as a responsible party.
Lawful Processing
Clear consent mechanisms and legitimate purpose documentation
Data Minimization
Collect only what's necessary for skills development
Purpose Limitation
Data used only for stated purposes
Security Safeguards
Technical and organizational measures in place
Data Subject Rights
Export, correction, and deletion capabilities
Accountability
Audit trails demonstrate compliance
How We Handle Your Data
Encryption
All data is encrypted at rest using AES-256 encryption. Data in transit is protected with TLS 1.3. API keys are stored as salted hashes, never in plain text.
Access Control
Role-based access control (RBAC) ensures users only see data relevant to their role. Provider admins control who has access to learner information.
Audit Logging
Every data access, modification, and export is logged with timestamps, user identification, and action details. Logs are immutable and retained for compliance purposes.
Data Retention
You control how long data is retained. We provide tools to archive or delete learner records in compliance with POPIA and QCTO requirements.
Infrastructure & Hosting
skillSYMS runs on Cloudflare's global edge network, providing enterprise-grade security and performance without the enterprise price tag.
Global Edge Network
275+ cities worldwide
DDoS Protection
Automatic attack mitigation
Web Application Firewall
Managed security rules
Always-On SSL
TLS 1.3 encryption