Trust Center
Trust you
can inspect.
Facts, scope and evidence — not badges. Each control says what is built, where it applies, how you can check it, and when we last reviewed it.
Hosting & residency
India hosting
kymeer's India SaaS runs on kymeer-operated infrastructure in a Tier IV data centre in India. The facility holds ISO 27001 and SOC 2 certification.
Singapore and EU hosting
Singapore tenants run on regional Google Cloud in Singapore. EU tenants run on Google Cloud in Germany, with disaster recovery in Finland.
Regions
India, Singapore and the European Union.
What crosses regions
Only account-routing data — email, tenant ID and region — so app.kymeer.com can send you to your cluster. Telemetry, cases and evidence stay in-region; if a tenant uses a cloud AI provider, those calls leave the region and are audited.
Self-hosted
On-prem and air-gapped installs keep all data in your environment. Licences are Ed25519-signed and verify offline.
Identity & access
Authentication
No passwords: an emailed one-time code, then an authenticator-app code (TOTP) for every user. Recovery codes, lockout after five wrong codes, and audited admin unlock and reset.
Sessions
256-bit session tokens in HttpOnly, Secure, SameSite=Strict cookies, with CSRF protection.
Roles
Analyst, Senior Analyst, Tenant Admin, MSSP Admin, Platform Admin and Auditor, enforced on the server for every action. Platform administrators cannot act inside client tenants without a time-limited break-glass grant.
Isolation, audit & encryption
Tenant isolation
The server injects the tenant boundary into every query; isolation is not a UI filter.
Audit trail
Per-tenant, append-only audit log linked by SHA-256 hashes, so tampering is detectable.
Encryption
AES-256-GCM envelope encryption; crypto-shred removes data by destroying its key.
Evidence integrity
Accepted events are archived to object storage, the system of record; the search tier is built from that archive.
AI governance
Advisory AI
AI explains and recommends. Actions carry danger levels; destructive ones need two approvers.
Egress control
Default-deny egress gate; built-in masking that replaces identifiers with numbered stand-ins before any model call; per-tenant token budgets; an audit record for every call. Local models are recorded as zero-egress.
Kill switch
A platform switch turns AI egress off within 60 seconds.
Data lifecycle
Retention
Events 30 days hot, 90 days warm, 365 days in total; incidents up to 7 years. Configurable per tenant.
Sub-processors
AI providers receive data only while external AI egress is on: Anthropic, OpenAI or OpenRouter when a tenant chooses them, or Unoblox when selected for the platform. Local models involve no third party.
Operations
Change management
Signed release manifests listing a SHA-256 checksum for every archive.
Monitoring of the platform
kymeer monitors its own platform; scope and alerting summary on request.
People, support & disclosure
Support model
Partner first; kymeer manages the SLA and escalation. Platform P1 incidents reach kymeer and the partner in parallel. Vulnerabilities go to product security only.
Signed agent updates
Agents and collectors install only updates signed with Ed25519 and checked by SHA-256.
Vulnerability disclosure
Reports go only to kymeer product security. Advisories are published after a fix.
“Built” means implemented in the kymeer platform. “Facility-held” means held by the hosting facility, not by kymeer.
Security advisories
Every fixed vulnerability, published.
Advisories list CVE, severity, affected and fixed versions, and workarounds. RSS feed.
Report a vulnerability
Found something? Tell our security team.
Reports go only to kymeer product security, never to partner or support queues.
Trust Center changelog
- 31 Oct 2026 — Controls reviewed and updated. Authentication: passwords removed; every user signs in with an emailed code and an authenticator. AI egress: built-in masking with numbered stand-ins.
- 11 Oct 2026 — Trust Center published. Regions: India, Singapore, EU (Germany, DR Finland), with scope, evidence and review dates for each control.