How we protect your data

• All data transmitted between your browser and Shoughl is encrypted in transit using TLS/HTTPS.
• Sensitive data is encrypted at rest within our hosting infrastructure.

• Employer access to candidate data is gated by the credit system — a candidate's full profile is only visible once an employer has unlocked it.
• Internal access to user data is limited to team members who need it to operate the platform, on a least-privilege basis.
• Account access is protected by authentication controls, with multi-factor authentication available (or planned) for account holders.

Credit purchases are processed through a licensed third-party payment provider. Shoughl does not store full payment card numbers on its own systems.

Shoughl is hosted on reputable cloud infrastructure with regular backups and monitoring in place. We review our infrastructure and vendor choices as the platform scales.

Where we rely on third-party tools — for hosting, analytics, communications, or payments — we work with established providers and expect them to meet appropriate data protection standards.

We monitor the platform for unusual activity and have a process in place to investigate and respond to potential security incidents. If a data breach affecting your personal data occurs, we will notify affected users and relevant authorities as required under the UAE PDPL.

If you believe you've found a security issue on Shoughl, please report it to contact@shoughl.com. We take responsible disclosure seriously and will respond promptly.

Shoughl's data practices are built around alignment with the UAE's Personal Data Protection Law (PDPL). As we grow, we intend to formalize additional security practices and pursue relevant certifications; this page will be updated as that roadmap progresses.

• Use a strong, unique password for your Shoughl account
• Never share your login credentials with anyone
• Report suspicious messages claiming to be from Shoughl to contact@shoughl.com