Skip to content
πŸ”’ Security-First Design

Your Data, Protected

skillSYMS is built with security and POPIA compliance at its core. We take data protection seriously so you can focus on skills development.

πŸ”’

POPIA Compliant

Built for South African privacy law

πŸ›‘οΈ

Encrypted Data

AES-256 at rest, TLS in transit

πŸ‘οΈ

Audit Trail

Every action logged and traceable

🌍

Edge Security

Cloudflare global protection

POPIA Compliance by Design

The Protection of Personal Information Act (POPIA) governs how personal information must be processed in South Africa. skillSYMS is designed from the ground up to help you meet your obligations as a responsible party.

Lawful Processing

Clear consent mechanisms and legitimate purpose documentation

Data Minimization

Collect only what's necessary for skills development

Purpose Limitation

Data used only for stated purposes

Security Safeguards

Technical and organizational measures in place

Data Subject Rights

Export, correction, and deletion capabilities

Accountability

Audit trails demonstrate compliance

How We Handle Your Data

Encryption

All data is encrypted at rest using AES-256 encryption. Data in transit is protected with TLS 1.3. API keys are stored as salted hashes, never in plain text.

Access Control

Role-based access control (RBAC) ensures users only see data relevant to their role. Provider admins control who has access to learner information.

Audit Logging

Every data access, modification, and export is logged with timestamps, user identification, and action details. Logs are immutable and retained for compliance purposes.

Data Retention

You control how long data is retained. We provide tools to archive or delete learner records in compliance with POPIA and QCTO requirements.

Infrastructure & Hosting

Cloudflare Powered by Cloudflare

skillSYMS runs on Cloudflare's global edge network, providing enterprise-grade security and performance without the enterprise price tag.

🌐

Global Edge Network

275+ cities worldwide

πŸ›‘οΈ

DDoS Protection

Automatic attack mitigation

πŸ”

Web Application Firewall

Managed security rules

⚑

Always-On SSL

TLS 1.3 encryption

Security Questions

Where is my data hosted?
Data is hosted on Cloudflare's global edge network with data residency options. All data is encrypted at rest and in transit.
Who owns the data?
You own your data. We are processors acting on your behalf. You can export or delete your data at any time.
How do you handle backups?
Data is automatically backed up with point-in-time recovery. We maintain 30-day backup retention.
Can I get my data out if I leave?
Yes. We provide full data export in standard formats (CSV, JSON) at any time, including when you close your account.

Questions About Security?

We're happy to discuss our security practices in detail.