Privacy Policy
This page explains how Job-E processes data for job evaluation and pay equity features.
What we process
- Organization structure data (departments, positions).
- Job descriptions (JDs) for position evaluations.
- Pay equity census data (pseudonymous) such as salary, variable pay, tenure years, and gender.
- Optional pay equity fields (location, manager_id, grade, employment_type) when provided.
AI boundary (job evaluation only)
AI is used only to assist job evaluations. We enforce strict minimization of what can be sent to AI.
- We send only: department name, position title, and the position job description.
- We never send submitter identity (e.g. submitted_by_name/submitted_by_email), user IDs, names, emails, or compensation data.
- Pay equity data is never sent to AI.
Pay equity boundary (never AI)
Pay equity analytics are computed inside Job-E and are never shared with AI agents or AI subprocessors.
- We use a pseudonymous employee identifier (anonymous_id) rather than direct identifiers.
- We do not require names, emails, addresses, attendance, or health data for pay equity.
Data residency, security & sub-processors
Your organization's data is stored and processed in the European Union. Our database, authentication, and file storage run on Nhost — an EU company based in Sweden — hosted on AWS in Frankfurt, Germany (eu-central-1). Our application and API layer run on Vercel infrastructure pinned to the Frankfurt (fra1) region.
Our infrastructure provider maintains a SOC 2 Type II certification. Data is encrypted in transit (TLS) and at rest. We rely on a small number of sub-processors, each bound by GDPR-aligned data protection terms:
- Hosting, database & storage: Nhost (Sweden / AWS Frankfurt, eu-central-1) — SOC 2 Type II certified
- Application & API hosting: Vercel (Frankfurt, fra1 region)
- Product analytics: Google Analytics, on public marketing pages only and gated behind cookie consent
- We do not store IP addresses, device identifiers, or browser fingerprints inside the application
- Employee data used for pay-equity analysis is pseudonymized before it reaches Job-E — no names, email addresses, phone numbers, or dates of birth; only opaque identifiers, pay figures, and gender
Your rights (GDPR/KVKK/CCPA/CPRA)
- Access and export your data (DSAR).
- Request deletion of your data, subject to legal and audit retention requirements.
- Object to or restrict certain processing where applicable.
- Contact us using the email above for requests.