Effective Date: 01 January 2026
Last Updated: 01 June 2026
CBET Master is developed, operated and supported by ABNO Softwares International Ltd.
This Data Protection Notice explains how personal data is handled when CBET Master is used by Qualification Awarding Bodies, QAIs, institutions, authorized staff, assessors, verifiers, candidates, trainees and other platform users.
CBET Master supports digital CBET assessment management. EduBridge supports trainee ePOE, assessment readiness and evidence submission workflows where applicable.
This notice is intended to inform users how personal data may be collected, used, stored, shared, protected and retained when using CBET Master and related services.
It applies to:
For official assessment, candidate, trainee, staff and institutional data:
The QAB, QAI or Institution is generally the Data Controller.
This means the QAB or institution decides why the data is collected and how it should be used for assessment, certification, reporting, compliance and related institutional purposes.
ABNO Softwares International Ltd is generally the Data Processor.
This means ABNO processes the data on behalf of the QAB or institution to operate, host, support, maintain, secure and improve CBET Master and related services.
For direct website enquiries, onboarding requests, executive briefing requests, support enquiries and general business communications submitted directly to ABNO, ABNO may act as the Data Controller.
Depending on your role and use of CBET Master, the following personal data may be processed.
Candidate, Trainee or Student Data
Staff, Assessor, Verifier and Administrator Data
Institution and QAB Data
Technical and Security Data
Communication and Support Data
Personal data is processed for legitimate CBET Master and EduBridge-related purposes, including:
ABNO does not sell QAB, candidate, trainee or assessment data.
Personal data may be processed based on one or more of the following:
Where consent is required from candidates, trainees, staff or users, the relevant QAB or institution is generally responsible for obtaining and maintaining that consent unless otherwise agreed in writing.
CBET Master respects assessment mandates.
TVET CDACC-assessed programmes follow the TVET CDACC pathway.
QAB or QAI-assessed programmes may be managed through CBET Master where the QAB is authorized to assess and certify those programmes.
EduBridge supports trainee ePOE, evidence readiness and guided registration workflows where enabled.
CBET Master does not replace the mandate of any regulator.
Access to personal data is limited based on role and authorization.
Personal data may be accessed by:
Users should only access data required for their assigned role.
CBET Master uses role-based access.
Not every user should access sensitive system settings.
Sensitive settings may include:
Sensitive access should be limited to authorized administrators and properly audited.
Personal data may be shared only where necessary and lawful.
Data may be shared with:
ABNO does not disclose QAB or candidate data to unauthorized third parties.
ABNO applies reasonable technical and organizational measures to protect personal data.
These may include:
QABs and institutions must also protect their side of the platform by ensuring that users keep login details confidential, avoid sharing accounts and report suspected misuse promptly.
Each QAB has its own CBET Master tenant portal.
Users should only access data belonging to their QAB, institution, assigned role or approved permission level.
One QAB should not access another QAB’s data.
ABNO internal access to tenant data is restricted to authorized support, implementation, maintenance, security or compliance purposes.
The QAB or institution is responsible for ensuring that official data submitted into CBET Master is accurate, lawful, complete and approved.
This includes:
ABNO may support data formatting, upload, validation and troubleshooting, but the QAB or institution remains responsible for approving official institutional and assessment data.
Personal data is retained only for as long as reasonably required for:
Retention periods may vary based on the type of data, QAB requirements and applicable law.
Subject to applicable law, a data subject may have rights relating to their personal data, including:
Where CBET Master processes data on behalf of a QAB or institution, data subject requests should generally be directed to the relevant QAB or institution first.
ABNO will provide reasonable technical assistance where the request relates to data processed in CBET Master.
Some trainees or learners whose data is processed through CBET Master or EduBridge may be minors.
Where data relates to minors, the relevant QAB or institution must ensure that the data is collected and processed lawfully, with appropriate notices, consent, authority or institutional mandate where required.
ABNO processes such data only for authorized platform, assessment, ePOE, reporting, certification, support and system administration purposes.
Where certificate verification is enabled, CBET Master may allow authorized stakeholders to verify certificate authenticity.
Verification should only display information reasonably necessary to confirm whether a certificate is valid, issued by the relevant QAB or institution, and linked to the stated qualification or assessment outcome.
Certificate verification must not be used for harassment, profiling, fraud or unauthorized personal data access.
CBET Master may send system notifications through:
Notifications may relate to:
Marketing communications are separate from essential system or security messages.
ABNO will not use QAB candidate or trainee assessment data for unrelated marketing.
Where hosting, backup, support, communication or technical service providers process data outside Kenya, ABNO will take reasonable steps to ensure that personal data remains protected in line with applicable law, contractual safeguards and data protection obligations.
Cross-border transfers, where applicable, shall be handled lawfully and responsibly.
Where ABNO becomes aware of a data breach or security incident affecting CBET Master, ABNO will take reasonable steps to:
Users should promptly report suspected unauthorized access, password compromise, data misuse or system abuse.
Users must:
Misuse of data or unauthorized access may lead to access restriction, suspension or other action.
For questions about this Data Protection Notice, CBET Master data handling, privacy requests or suspected misuse, contact:
ABNO Softwares International Ltd
Kaka House, 3rd Floor
Maua Close, Off Parklands Road
Westlands, Nairobi, Kenya
Email: info@abnosoftwares.com
Phone: +254 792 550 077
Where the concern relates to official candidate, trainee, staff, assessment or institutional data, users should first contact the relevant QAB or institution.
Where a privacy concern relates to data controlled by a QAB or institution, the user should first contact the relevant QAB or institution.
Where the concern relates to ABNO’s operation of CBET Master, users may contact ABNO using the details above.
Users may also lodge a complaint with the relevant data protection authority where applicable.
ABNO may update this Data Protection Notice from time to time to reflect changes in law, platform features, operational processes, security practices or contractual requirements.
The updated notice will be published through the CBET Master website or relevant platform channels.
CBET Master is built to support secure, credible and traceable digital CBET assessment.
Data protection is central to that trust.
CBET Master powers assessment and verifiable certification.
EduBridge powers trainee evidence readiness.
Responsible data handling protects every QAB, institution, trainee and stakeholder in the CBET ecosystem.
