Your data is yours. Always.
Kipprs is built with isolation, encryption and role-based access from the ground up. We never share your data with anyone.
Encryption everywhere
All data is encrypted in transit (TLS 1.2+) and at rest, with keys stored securely.
Isolated by design
Multi-tenant from the ground up with data segregated at every tier — or a fully dedicated instance.
Single sign-on & MFA
Sign in with Google, Microsoft Entra or Slack, plus multi-factor authentication.
Role-based access
Users only see the teams and information their role allows, with configurable tree depth.
Tamper-proof audit log
Every change, login and appraisal is recorded in an immutable audit trail.
Tested continuously
Annual penetration tests, release scanning and vulnerability management.
Standards and practices
| Area | Practice |
|---|---|
| Hosting | Google Cloud, europe-west2 by default; other regions and on-premise available |
| Data centre security | CSA CCM v3.0, SSAE-16 / ISAE 3402 physical access controls |
| Staff vetting | BS 7858:2012 and Developed Vetting (DV); OWASP practices |
| Penetration testing | At least once a year, more on request |
| Resilience | Multi-zone replication, auto-scaling, automated testing, canary releases |
| Change management | Reviewed designs, CI/CD pipelines, security-scanned releases, semantic API versioning |
| Data export | Full JSON export over secure APIs or an encrypted archive at any time |
Security questions
What happens to my data if I cancel?
Your workspace becomes read-only for 90 days so you can export everything or re-join. After that, all data is permanently deleted.
Can I get a full copy of my data?
Yes — at any time, over our APIs or as an encrypted archive of JSON files including the audit history.
Can you integrate with our SOC?
Yes. Customer SOC integration can be configured on request.
Security review on your list?
We are happy to complete your questionnaire and walk your team through our controls.