Notes

11 July 2026

Why the organisation that pays for your access cannot see your work

Updated 19 August 2026. Originally published 11 July.

When an organisation buys kojiex seats for its people, the buyer gets almost nothing. It can see that a seat was assigned to you and which product it was. It cannot see what you said in your interview, what your CV looks like, your practice stories, your coaching, or whether you ever logged in.

That is not a settings default. We do not tell the organisation anything about your use of kojiex: not on a screen, not in an export, not in a report, not in an email, not in answer to a question, and not by implication from anything else it can see.

The trust problem sponsored tools have

A career tool only works when you are candid: the project that went sideways, the work you are proud of and why you undersold it for years. And nobody is candid inside software their sponsor can watch. If the answer to "can they see what I put in it?" is "technically yes, but they promise not to look", the tool is dead.

So we made the answer no, and we made it structural.

What structural means

Four things, each of which would have to be independently broken:

The organisation's view is its own record, not a window. The organisation page shows what the buyer itself entered when assigning your seat, the name, role and team it knows you by, plus its purchase history. It reads from the organisation's own records. Your account, your content, and your usage are not part of what that page can request.

Your rows answer only to you. Every piece of your content is guarded at the database level: row-level security means your rows are readable by your account and no other. Our own application tier is scoped the same way, and an automated test harness proves that a second user sees zero of the first user's data, on every change we ship.

The organisation is never given a name for you that works anywhere else. Every row on its records is addressed by an identifier that exists only inside that organisation's records. If you hold seats from two employers, each holds an unrelated identifier and neither can tell you are the same person. A record whose name and email have been erased by retention points at nothing at all.

Even the trace expires. The organisation's record of you, the name and email and role it typed, is erased automatically after 90 days by default; the organisation can change that period or turn it off, and its setting is shown on its own team page. What remains is the organisation's tally of what it handed out, with nobody attached to it. If you later change your name or move to a personal email, the organisation is not told. The seat was theirs to give; the account is yours to keep, through every job that comes after.

The one thing this cannot cover: the device you use

Everything above is about our side, and it holds on any machine. What it cannot cover is the machine itself. A work laptop often carries software the employer installed: a managed browser, a security agent, network inspection. On equipment like that, what is on your screen is as visible as the equipment makes it, in kojiex and in everything else.

The answer is the same one we give for email: use your own device, on your own network. kojiex is exactly as private either way. The difference is who can see the screen you read it on.

A seat, once given, is gone

Assigning a seat is one-way. The organisation cannot take it back, move it to someone else, or ask for it to be refunded, and it makes no difference whether you used it. That last part is the point: working out a refund would mean telling them whether you had started, and that is the one question we will not answer.

The same goes for what you make here. Your CV and everything behind it belong to you, and you never have to show any of it to anyone: not to a manager, not to HR, not as part of a reference or an exit process. We will never tell your employer what is in it, and nothing about your seat depends on anyone seeing it.

Why a buyer should want this

A sponsored tool that people do not trust produces polite, empty CVs. One they do trust produces people who land somewhere good, which is the outcome the buyer is paying for.

We keep a full, current account of our security posture, what is in place and what is underway, on the Security page. If you are evaluating kojiex for your organisation and want to test any claim in this post, get in touch.

The kojiex team

Updated 19 August 2026: added what the boundary cannot cover (the device you use), and made explicit that nothing requires you to show anyone what you make here. Updated 6 August 2026: strengthened the description of how the boundary is enforced, and corrected the retention paragraph. Originally published 11 July 2026.