Security and POPIA

Everything you put into mennula is stored on our servers in Johannesburg. Encrypted backups are kept in Cape Town.

We store your data only in South Africa.

Every agency gets its own database, its own login to it and its own encryption key.

One agency's CVs can never show up in another agency's account, even by mistake.

To read and score CVs we use an AI service outside South Africa. Before anything is sent, our own servers remove names, phone numbers, email addresses and ID numbers.

Scores and emails are matched back to the right person here, in South Africa.

Every email mennula writes waits for someone at your agency to read it and say yes.

Only fixed notices you choose, like “We got your CV” or an interview reminder, go out on their own.

Only the people you invite to your agency.

mennula staff can't open your data unless an admin at your agency gives us access for a set time, for example to help with a problem. Every look is written to your audit log.

Under POPIA your agency is the responsible party and mennula is your operator. We use candidates' details only to do what you ask, keep them safe, tell you quickly if anything goes wrong and delete them when you ask. Our Operator agreement sets this out in full.

When a candidate asks to see, fix or delete their details, you can do it from their page in mennula. CVs nobody has touched for 24 months are deleted automatically.

Encrypted backups run every night and are kept for 35 days. We practise restoring them, so a bad day never becomes a lost week.

[Information Officer's name]. Email privacy@mennula.com, or write to [postal address].