Platform · Security & Data Protection
Your data stays yours, separated from every other business on the platform
KztOne is built as a multi-tenant platform with isolation enforced inside the database, not just in application code. Credentials are encrypted, access is least-privilege, and you can export everything at any time.
- Included in
- Free plan and above
- Status
- Available now
- Module
- Platform
- Trial
- Included in the 7-day trial
Isolation enforced by the database
Every business record carries a workspace id, and PostgreSQL row-level security refuses to return or write rows outside the current workspace. Even a programming mistake cannot leak data between businesses.
- Row-level security on every business table
- Workspace-scoped sessions and API keys
- Support access is time-limited and audited, never silent impersonation
Secrets and authentication
Connector tokens, API secrets and WhatsApp credentials are encrypted at rest with keys held outside the database. Passwords are hashed with a modern algorithm; sessions expire; platform staff use multi-factor authentication.
- AES-256 encryption of credentials
- Password hashing and lockout on repeated failures
- MFA for platform administrators
Backups and your right to leave
Databases are backed up continuously with point-in-time recovery. You can export every record to CSV or Excel at any time, and request a full workspace export.
- Continuous backups
- Self-service export of all records
- Data deletion on request after cancellation
What you get
- Confidence
- Isolation is a database guarantee, not a promise.
- Control
- Permissions, MFA and audit keep access tight.
- No lock-in
- Your data is exportable at any time.
Questions
- Where is my data hosted?
- In a managed cloud region selected for reliability and latency to our customers. Enterprise customers can choose a region or deploy on their own infrastructure.
- Can Kingzitech staff see my data?
- Only through a time-limited support session that you can see in your audit log, used to resolve a support request. There is no silent access.
- Is KztOne compliant with the NDPR?
- KztOne is designed with data protection principles in mind: minimisation, access control, encryption and deletion on request. Formal certifications are published as they are obtained.
- Which KztOne plan includes security & data protection?
- Security & Data Protection is included in every plan, including Free. Every new workspace gets a 7-day trial of the full platform, so you can try it before choosing a plan.
Related
Audit Logs
A complete record of user, AI, workflow and connector actions on your data, with before-and-after values for sensitive changes. Business plan and above.
User & Role Management
Invite your team and control access with roles and permissions. Owners, managers and staff each see only what they should. Custom roles on Growth plans.
Data Import & Export
Import contacts, products, stock, orders and invoices from spreadsheets with column mapping and duplicate preview. Export any list or report, on every plan.
See it with your own data
Create a workspace, import your records and try every feature free for 7 days.