Data hosting and cross-border transfers

Zimbabwe National Roads Administration (ZINARA) · ZinRecruit · Updated 12 October 2026

Draft for review by ZINARA's Data Protection Officer and legal counsel. Contact: dpo@zinara.co.zw.

Summary

ZinRecruit uses cloud services whose servers are outside Zimbabwe, so personal data can cross borders. ZINARA remains responsible for it wherever it is processed.

Why it crosses borders

Zimbabwe does not currently host the cloud platforms ZINARA uses for its database, email, storage, maps and AI features, so data is stored or processed in the provider's data centres abroad.

Safeguards

Contracts that commit each provider to protect the data and use it only on ZINARA's instructions; encryption in transit and at rest; role-based access; audit logging; and review of each provider before use. Transfers rely on the safeguards the Cyber and Data Protection Act allows: adequate protection, contractual protections or your consent.

What we do not send

Passwords are never passed to another ZINARA system or provider in readable form.

Your choices

Ask where your data is held, or object to a transfer, by writing to dpo@zinara.co.zw. Optional features that use AI or maps send the text or places you enter to the providers listed below.

Review

ZINARA's Data Protection Officer reviews this notice at least yearly.

Providers outside Zimbabwe

ServiceWhat goes thereProvider
Cloud hosting and databaseApplications, CVs, identity documents and interview records are stored in cloud infrastructure. Region: confirm with ICT.Cloud provider (confirm: Microsoft Azure)
Email delivery (Microsoft 365)Notification and interview emails.Microsoft Corporation
Azure OpenAI (screening assistance)CV and application text that you submit may be summarised or scored to help recruiters. Deployment region: confirm.Microsoft Corporation