If you run an agency or a construction firm, your worker database and your client list are your business. Here is exactly — in plain English — what we guarantee, and how it's enforced in the way Graftum is built, not just promised in a policy.
Every record in Graftum — workers, applicants, clients, timesheets, rates, invoices — is locked to your company using row-level security in the database itself. It's not a filter in the app that could have a bug; the database refuses to return another company's rows. No other Graftum customer can see your data, and you can't see theirs.
Your join link (graftum.com/j/your-name), your jobs page (graftum.com/jobs/your-name) and your job ads on the public board all feed one place: your account. There is no opt-in to anything else on your branded forms — no hidden pooling, no "also share with…" checkbox. A worker who applies to your ad is your applicant, and only yours.
Your ads can also appear on the shared board at graftum.com/jobs for extra reach — but that's a per-ad checkbox you control, and even from the shared board, applicants land only in your account. The Graftum Crew list (our worker community) grows through its own channels, never through your forms.
Graftum lets you share one job with one named client company (your main contractor, or the firm you maintain buildings for) — but only when you create the share link yourself. You choose exactly what they see — the agreed price, progress, signed day sheets — and nothing else: never your margins, your team's rates, your costs, or any other job. The share is revocable by you at any moment, instantly. Technically, nothing about company isolation changes: the other company's access runs through narrow, purpose-built gates that check your share before returning anything.
Graftum is a subscription product. You pay us; that's the whole business. We don't sell databases, we don't share your workers with other agencies, we don't monetise your client list. When software is free, the data is the product — Graftum isn't free, precisely so your data never has to be.
Data is stored on servers in London, United Kingdom, encrypted in transit and at rest. Graftum Ltd is registered in England & Wales (no. 17387844) and registered with the ICO (reg. ZC217261). Everything we do is under UK GDPR — the full detail is in our privacy policy.
It's your database, so you can take it with you. Ask and we'll give you a full export of your data, and delete what you want deleted. One email to hello@graftum.com is enough — no retention tricks, no exit fees.
We'll put any of the above in writing for your records.