Learners trust us with their information. We take that seriously.

Consent comes first

A learner chooses to share an application with a funder when they submit it. Until then, the funder cannot see it.

Learners only fill in what a bursary asks for, and the information they already gave UniApplyForMe is reused rather than asked for again.

Kept only as long as needed

Applications are kept for the bursary cycle plus two years, or five years when the learner is awarded the bursary. Then the personal information is removed and only anonymous numbers stay.

Award and payment records are financial records: they are kept for seven years after the award ends, then the personal details in them are removed too.

Two step verification for every funder

Everyone who signs in to the portal uses a password and a code from an authenticator app. Invitations expire after seven days and can be used once.

The right access for each person

Each team member has a role: admin, reviewer, viewer, finance or finance approver. Reviewers never see banking details; finance roles see only what they need.

Whoever captures an invoice, payment or change of banking details can never approve it. This is enforced in the database, not only in the screens.

Banking details encrypted

Payee banking details are encrypted before they are stored. Screens show only the last four digits, the full number appears only in the payment run export for your bank, and any change needs a bank confirmation letter and approval by someone else.

UniApplyForMe never moves money: funders pay from their own bank accounts and record the payment here.

Agreements you can prove

Every signer agrees to sign electronically and confirms a one time code sent to their email. The signed PDF includes a signing certificate with every step, and a public page checks that it has not been changed.

A record of who did what

Status changes, approvals, document views, downloads and exports are recorded with the person and the time. History cannot be edited or deleted.