Security

Built so you never have to hand over your data

We work inside your systems, with access you control. Here is exactly how.

Your data stays in your warehouse

The kit runs in a BigQuery project or Snowflake account you own. Our platform stores requests and messages, not your customer records.

Read-only, revocable access

You grant our team read access to the specific tools and datasets we need. You can see and revoke it at any time.

Your code, in your repository

Every change arrives as a pull request in your GitHub. Branch protection means nothing merges without review.

People approve every change

A person on our team reviews every change before it reaches your systems or your team.

Least privilege inside Koladr

Engineers only see the clients they are assigned to. Every staff sign-in requires multi-factor authentication.

Customer details stay hashed

In the reporting tables we build, customer emails are hashed. Raw personal data stays in restricted staging tables.

Our team

Who works on your account

Engineering is done by our own team on company-managed devices, with access limited to assigned clients. Your account lead reviews the work before it reaches you.

If your policies restrict who can access your data or where it can be accessed from, tell us and we’ll work within them.

Compliance

Where we are today

We are working toward SOC 2. We sign a data processing agreement with every client, and we are happy to complete your security questionnaire.

Questions or a vulnerability to report? Email hello@koladr.com.