Passports are the most sensitive data an agency keeps.
Here is who sees them, where they are and how they go.
Who sees them
- Your agency and nobody else: the database itself ties every record to it.
- Inside the team, each role sees only the modules you give it, checked on every request.
- Changes are logged: who changed what, and when.
Where they are
- In the European Union: the database and the files are in Stockholm.
- Passport scans sit in private storage and open only through short-lived links.
- Encrypted in transit and at rest.
How they go
- Anyone can ask for their data to be deleted on our deletion page, with no account and a reference number to follow it.
- The agency decides how long candidate data is kept.
- When an agency leaves, its data is returned or deleted within 30 days.
Questions about data.
Is our data safe?
Yes. Data is stored in the European Union and encrypted in transit. Every agency is fully isolated: no one outside your organization sees your candidates or settlements. Access within the team is governed by roles and permissions you set yourself.
Where exactly is the data?
In Stockholm: that is where the database and the files are. Passport scans sit in private storage and open only through short-lived links, and everything is encrypted in transit and at rest.
Can we see who changed what?
Yes. Changes are logged: who changed what, and when. Each role on the team sees only the modules you open to it, and that is checked on every request.
A candidate asks us to delete their data. How does that work?
They can file a request on our data deletion page, without an account, and get a reference number that shows its status. How long candidate data is kept is up to your agency.
What happens to our data if we leave?
After the contract ends you have 30 days to export your data. Then we delete or anonymise it, except what the law requires us to keep.
See Sync on your own data
Your account in 2 minutes, a working system in 15.