Your agency’s book, kept like it matters.
How Templace is hosted, how each agency’s records are kept apart, who can come in, and what happens to the data.
One system, a separate book for each agency
Every agency on Templace runs on the same platform, with its own book of records: its own candidates, workers, hirers, documents and settings. One agency cannot see another’s, and the server checks that on every request, not just the screens.
Hosted in the United Kingdom
The service, its database and its backups are hosted in the UK. Every connection is encrypted, and the server tells browsers to insist on that for a year.
Backups, nightly, somewhere else
The book is backed up every night and the backups are kept for 30 days on storage separate from the live service. Before any release is installed, a fresh backup is taken; if the new release does not answer, the previous one is put back automatically.
Checked before it goes live
A release is installed only after the whole automated test suite has passed on it, and the server runs its own go-live checks before it starts: the files are the ones that were tested, no key is left in the code, the address is https, the backup folder can be written to, a backup ran in the last day.
Passwords and sign-in
Passwords are never stored — only salted hashes. Repeated failed sign-ins are refused for fifteen minutes, and each agency has its own sign-in address in its own brand.
We come in only when you let us
Templace’s people enter your system when you invite them, or when they ask and your Super User says yes — for the time you choose, withdrawn whenever you like. The agreement names a few reserved grounds (you are locked out and have asked for help, a security incident, a legal obligation, an unpaid account after notice) and every entry on one of them emails you a notice saying who, when and why.
An audit trail that cannot be edited
Every change is written with who made it and when, chained so that a removed or altered entry shows. When Templace works in your system, everything it does is recorded against the Templace person who did it, and you can see every visit.
Changes you can see coming
When the law moves a rate or a rule, the change applies itself and tells you what it was before. Everything else — a new screen, a better default — waits for your decision, and a “no” can be revisited later.
What AI never sees
Identity documents, right-to-work evidence and criminal-record certificates are never sent to an AI model. AI drafts and suggests; a person at the agency decides.
Your data stays yours
For the personal data in your book, your agency is the controller and Templace is its processor, under a data processing addendum that forms part of the agreement. You can export everything at any time. When an agreement ends, the data is kept for 90 days so you can take it, and then deleted.
The legal terms behind this page — the data processing addendum, the service levels and the list of sub-processors — are on the terms page. How long each kind of record is kept is on the use of data page.
See it with your own agency’s name on it.
A trial runs on sample data in your colours and your logo, so the people who will use it can judge it as theirs. Tell us your sector and how many workers you place in a week.
