Security

Customer data is the core of our service, so protection is built in at every level.

In transit

All connections are encrypted with TLS 1.3. Unencrypted connections are not accepted.

At rest

Data is encrypted with AES-256, with separate keys per customer. Disks are combined in a redundant RAID array, so a single disk failure does not cause data loss.

Hosting

Our equipment is hosted in a data centre in Bishkek. Data does not leave Kyrgyzstan, and no third-party cloud providers are used.

Access

Staff access follows least-privilege principles and is fully logged. Management systems require two-factor authentication.