Security overview
See in one table how Kabaido isolates, encrypts and protects your commercial data.
Updated 23 September 2026
- Why
- A quote shows what a business buys, from whom, at what margin and for which customer.
- How
- Isolation lives in the database, not in application code, so a missed filter cannot leak another organisation's rows.
The model in one view
| Layer | Practice |
|---|---|
| Isolation | Every row is organisation scoped under row level security in Postgres. Storage paths start with the organisation's id. |
| Encryption | TLS in transit, AES-256 at rest, and integration credentials encrypted again by the application. |
| Access | Ranked roles enforced by the database, owner safeguards and an audit log of administrative actions. |
| Your customers | A separate principal that is never a member of your organisation. See the customer facing trust boundary. |
| AI | Anthropic only, whose commercial terms bar training its models on customer content. Every value is cited or left empty. |
| Hosting | Database and files in the EU (AWS Frankfurt, eu-central-1); the application runs in London. |
| Payments | Stripe holds card details. Kabaido never sees them. |
| Your data | Export at any time; deletion by the owner or on request. |
Every plan runs on the same shared infrastructure with the same isolation. There is no dedicated or customer held key tier today.
Every provider Kabaido runs on holds SOC 2 Type II, and the database, hosting and AI hold ISO 27001 too. The security page links each provider's own page so you can check.
Related
- Tenant isolation and access controlSee how organisation scoping is enforced at the database and who can do what inside your account.
- AI data handlingKnow what the AI sees, what it never does and how the homepage AI is kept apart from your data.
- Compliance and GDPRFind the legal frame, the sub-processors and where they run, and how to exercise data rights.
- The customer facing trust boundaryKnow why a customer signed in to your Commerce surface can see their own records and nothing else.