GembaLytics is GDPR compliant which means that as an organization and product we follow the rules of the EU’s General Data Protection Regulation to protect personal data. 

The GembaLytics application applies Zero‑knowledge to how it collects assessement interview data from survey participants.  It is a method where one party can prove something is true without revealing any underlying data. It enables verification (identity, transactions, permissions while keeping all sensitive information hidden. This makes it a cornerstone for privacy‑preserving authentication, secure blockchain transactions, and systems that need trust without exposure.

GembaLytics is architected around role-based security. RBAC is a governance and security model that restricts system access based on defined organizational roles, not individual users. It ensures people see only the data and capabilities aligned to their responsibilities, reducing risk, simplifying administration, and strengthening compliance.