Security
Your business data, kept safe.
How we protect the data of our clients and of their customers: what we do, where the data is kept, what you can do.
Each company sees only its own data
The separation is enforced by the database itself, row by row, not just by the software.
Encrypted data
Encrypted in transit and at rest. Card details never pass through our servers: they are handled by Stripe, which is PCI-DSS certified.
Protected access
Two-step verification, sign-in with Google and protection against bots on public forms.
Logs and backups
Sensitive operations are logged, errors show up straight away (without personal data) and the database is backed up regularly.
Privacy, GDPR
Compliant with EU Regulation 2016/679. Every user can export or delete their data from the settings. Our suppliers work under data processing agreements and standard contractual clauses.
Transparent use of AI
KiwiCall says at the start of the call that it is an automated system. The AI makes no decisions with legal effects and is not trained on our clients’ data.
Where the data is kept
The database is in the European Union, in Frankfurt. If a supplier works outside the EU, the transfer is covered by standard contractual clauses and a data processing agreement, as explained in the Privacy policy.
- GDPR · EU Reg. 2016/679
- AI Act · EU Reg. 2024/1689
- PCI-DSS, through Stripe
- Standard contractual clauses
Your data stays yours
You can export or delete your data whenever you like, from your account settings. To report a security issue, write to support@kiwienterprise.it: you will hear directly from the people who work on the platform.