Security and data protection
How KitoDesk keeps each customer's information separate, who can see what, and what is recorded. These are controls in the product today, described plainly.
Each organisation is isolated
Customer data is separated at the database level with row-level security, so a workspace can only read its own records. Isolation does not rely on application code alone.
Access follows roles and scopes
Permissions are set per role with own, team and organisation scopes, and people can be limited to specific branches. The server checks every request, not just the screen you see.
Strong sign-in controls
Workspaces can require multi-factor sign-in, set session lengths and restrict invitations by email domain. Suspending or removing someone ends their sessions immediately.
Credentials are encrypted
Provider keys and channel secrets are encrypted at rest with AES-256-GCM and are never shown back in full.
Sensitive changes are logged
Changes to people, roles, access, ownership and AI actions are written to an audit log with who did it and when.
AI works inside your rules
Answers cite their sources. Low-risk actions run on their own and sensitive ones wait for an approver. Each workspace has its own usage allowance and AI activity is tenant-isolated.
Public website, private workspaces.
The marketing site is the only part of KitoDesk that search engines are asked to index. The application, API, administration console, development environment and every customer workspace require sign-in and are excluded from search results.
What we have not claimed
KitoDesk does not currently advertise third-party security certifications. Questions about hosting location, data retention, backups and your own regulatory obligations are best answered in a conversation, so get in touch and we will answer them directly.
Show us how your team works. We will build the walkthrough around it.
Tell us your channels, your volumes and who answers what. The demo uses your own situation, not a scripted one.
- Built around your own workflow
- Security and rollout questions answered
- No obligation
Your order 4821 is out for delivery today before 5pm. I have sent the tracking link to your phone. Anything else I can help with?