Security Standards

Bank-Grade Security Architecture

Built from the ground up for high-security enterprise environments.

πŸ”’ Encryption Standards

AES-256 encryption at rest for all database clusters, object storage, and backups. TLS 1.3 enforced for data in transit with strict HSTS preloading.

πŸ”‘ SAML 2.0 & SSO

Support for Okta, Microsoft Entra ID, Google Workspace, and Ping Identity with forced Multi-Factor Authentication (MFA) and SCIM provisioning.

πŸ“‹ SOC 2 & ISO 27001

Continuous compliance monitoring certified under SOC 2 Type II (Security, Availability, Confidentiality) and ISO 27001:2022 standards.

πŸ›‘οΈ Vulnerability Management

Automated daily static and dynamic application security testing (SAST/DAST), dependency scanning, and annual independent third-party penetration tests.

πŸ—ΊοΈ Data Residency Options

Dedicated single-tenant cloud deployments located strictly in US, Canada (Montreal/Toronto), EU (Frankfurt/Ireland), or UK datacenters.

🚨 Incident Response

24/7/365 Security Operations Center (SOC) monitoring with guaranteed 15-minute response SLA for critical security alerts.

Report a Security Vulnerability

We welcome bug reports from security researchers. Please review our disclosure policy.

Security Email: security@kibo.is (PGP Key available)