New: WhatsApp Mark — campaigns and AI replies on your own number, no Meta verification needed.See how it works

Platform · Security & Data Protection

Your data stays yours, separated from every other business on the platform

KztOne is built as a multi-tenant platform with isolation enforced inside the database, not just in application code. Credentials are encrypted, access is least-privilege, and you can export everything at any time.

Included in
Free plan and above
Status
Available now
Module
Platform
Trial
Included in the 7-day trial
Illustration of the KztOne Command Center: key numbers, items needing attention and the AI assistant

Isolation enforced by the database

Every business record carries a workspace id, and PostgreSQL row-level security refuses to return or write rows outside the current workspace. Even a programming mistake cannot leak data between businesses.

  • Row-level security on every business table
  • Workspace-scoped sessions and API keys
  • Support access is time-limited and audited, never silent impersonation

Secrets and authentication

Connector tokens, API secrets and WhatsApp credentials are encrypted at rest with keys held outside the database. Passwords are hashed with a modern algorithm; sessions expire; platform staff use multi-factor authentication.

  • AES-256 encryption of credentials
  • Password hashing and lockout on repeated failures
  • MFA for platform administrators

Backups and your right to leave

Databases are backed up continuously with point-in-time recovery. You can export every record to CSV or Excel at any time, and request a full workspace export.

  • Continuous backups
  • Self-service export of all records
  • Data deletion on request after cancellation

What you get

Confidence
Isolation is a database guarantee, not a promise.
Control
Permissions, MFA and audit keep access tight.
No lock-in
Your data is exportable at any time.

Questions

Where is my data hosted?
In a managed cloud region selected for reliability and latency to our customers. Enterprise customers can choose a region or deploy on their own infrastructure.
Can Kingzitech staff see my data?
Only through a time-limited support session that you can see in your audit log, used to resolve a support request. There is no silent access.
Is KztOne compliant with the NDPR?
KztOne is designed with data protection principles in mind: minimisation, access control, encryption and deletion on request. Formal certifications are published as they are obtained.
Which KztOne plan includes security & data protection?
Security & Data Protection is included in every plan, including Free. Every new workspace gets a 7-day trial of the full platform, so you can try it before choosing a plan.

See it with your own data

Create a workspace, import your records and try every feature free for 7 days.