Nokha processes contractor and client-user data to run engagements: onboarding, compliance, timesheets and payment. The lawful basis for each column is recorded in the generated PII inventory.

Identity documents, bank details and similar fields are encrypted at field level and visible only to you and to Nokha staff with a stated purpose. Clients see the state of your compliance documents, never the documents.

You can request access, rectification, erasure, restriction, portability or objection from Account settings. Engagement and tax records have statutory retention periods that an erasure request cannot shorten; where one applies we tell you which and why.