Security đź”’

Our team takes security measures very seriously. As a financial services company, it is our job to make sure everything is built with state of the art security practices. This allows our customers to sleep in peace knowing that we are protecting their data with all our engineering prowess. Following are the big picture measures we take to protect your data.

Infrastructure

- We host our infrastructure on Amazon Web Services (AWS) inside a Virtual Private Cloud (VPC) to isolate our services and instances.

- All the communication between the Kniru app and infrastructure is done using the HTTPS protocol.

- All internal services operate in isolated environments and intra-service privileges are authorized only on a must-have basis.

App Security

- We use Google Cloud Platform's Firebase Authentication to ensure security at the app level.

- All authentication is done using One Time Passwords (OTP) to ensure that the user has possession of the phone number.

Data Security

- All data is encrypted at rest and in transit.

- Data is replicated for disaster recovery using the standard AWS Practices.

- Data is anonymized before entering the intelligence pipelines.

Financial Data Security

-Financial Data is accessed using the Account Aggregator Framework and all security measures are implemented in compliance with the Rebit AA API Specification.

- Financial Data access is consent based and the user can revoke or restrict access at any time.