Formal Statement on Kanso Security, Data Protection, and Business Continuity

As of November 25, 2025

Kanso takes the security, availability, and resilience of client data with the highest level of seriousness. As an organization independently audited and verified as SOC 2 Type 1 compliant, our internal controls, security policies, access management procedures, and monitoring practices adhere to industry-recognized standards for the protection of sensitive information. We maintain strict encryption, authentication, and data-handling protocols, and our infrastructure is continuously monitored and updated to safeguard against unauthorized access, malware, and other malicious threats. This commitment ensures that client and tenant information remains secure, confidential, and protected against operational disruptions.

In the event of an incident—whether caused by cyberattack, infrastructure failure, or another disruption—Kanso has a comprehensive Business Continuity and Disaster Recovery (BCDR) Program that includes AWS Availability Zone and Region replication, defined recovery procedures, and regular testing to validate readiness. As outlined in our Business Continuity & Disaster Recovery Plan, Kanso replicates data across multiple AWS zones and regions to ensure high availability and rapid restoration capabilities, minimizing downtime and preventing data loss. Our Disaster Recovery Policy further details our safeguards for data integrity, including encryption, access controls, and clearly defined roles and responsibilities to ensure coordinated recovery actions and timely communication with stakeholders. Complementing these measures, our Backup Policy ensures frequent point-in-time backups of all client data, including hourly, weekly, and monthly MongoDB snapshots and daily SQL backups, with defined restore windows that allow rapid recovery from data loss, corruption, or system compromise. You can access each of these individual policies below:

Need a PDF? Click here.