Last updated: 2 November 2026
Data protection (UU PDP)
Law No. 27 of 2022 on Personal Data Protection (UU PDP) sets out how personal data in Indonesia must be handled. This statement describes how KerjaQu supports it.
01Roles
Your company is the personal data controller for employee data. KerjaQu acts as a processor and processes that data only on your instructions, to provide the service.
02Security measures
Tenant isolation with database row-level security, encryption in transit and of sensitive fields at rest, two-factor authentication, role-based access with data scope, audit logging and encrypted backups.
03Location
Application data and uploaded files are stored in data centers located in Indonesia.
04Data subject rights
Employees can view and update their profile in the app. Administrators can export an employee’s data to respond to access requests and correct or delete records where the law allows.
05Incidents
If we become aware of a personal data breach affecting your data, we will notify you without undue delay with the information you need to meet your own notification obligations.
06Contact
Data protection questions: [email protected].