Security

Access control

Kahvor uses authentication, authorization, scoped access, and workspace controls to limit access to accounts and connected data.

Encryption

Kahvor uses transport encryption for data in transit and relies on managed infrastructure controls for encryption and storage safeguards.

Operational security

We use logging, monitoring, credential hygiene, deployment controls, and least-privilege practices to reduce operational risk.

Connected account security

OAuth tokens and connected account credentials are handled with care and are used only to provide authorized product features.

Incident response

If we determine that a security incident affects user data, we will investigate, mitigate, and notify affected users or workspace administrators as required by law or agreement.

Reporting

Security concerns can be sent to [email protected].