Summary
ZEBS uses cloud services whose servers are outside Zimbabwe. This means personal data can cross borders. ZINARA remains responsible for it wherever it is processed.
Why it crosses borders
Zimbabwe does not currently host the cloud platforms ZINARA uses for its database, email, document storage and AI features, so data is stored or processed in the provider's data centres abroad.
Safeguards
Contracts with each provider that commit them to protect the data and process it only on ZINARA's instructions; encryption in transit and at rest; access limited by role; audit logging; and a review of each provider before use. Transfers rely on the safeguards the Cyber and Data Protection Act allows, such as adequate protection, contractual protections or your consent.
What we do not send
Passwords are never sent to another ZINARA system or provider in readable form. Fingerprints and faces never leave your device.
Your choices
You can object to a transfer or ask where your data is held by writing to dpo@zinara.co.zw. Some features (for example Terra AI) are optional; do not use them for data you do not want processed abroad.
Review
ZINARA's Data Protection Officer reviews this notice at least yearly. Last updated 12 October 2026.
Providers outside Zimbabwe
| Service | What goes there | Provider |
|---|---|---|
| Microsoft Azure (database and application hosting) | Employee, payroll-adjacent, leave, attendance and workflow records are stored in an Azure database. Region: confirm with ICT (shown in the Azure portal). | Microsoft Ireland Operations Ltd / Microsoft Corporation |
| Microsoft 365 (email, SharePoint, Entra sign-in) | Notification emails, e-signature audit records and document storage. | Microsoft Corporation |
| Azure OpenAI (Terra AI assistant) | Text you type into Terra and the record context sent with it are processed to produce an answer. Not used to train models under ZINARA's agreement; confirm the deployment region. | Microsoft Corporation |
| Google Maps Platform | Places, route and distance look-ups used by fuel, transport and venue forms receive the addresses or coordinates you enter. | Google LLC |