Procurement & security review

Documents under NDA

For security, risk and procurement reviews. The business team releases these after a short check of who is asking and why.

Security architecture whitepaper

Hosting, identity, server-side isolation, hash-chained audit, envelope encryption and AI egress controls in depth.

Tenant-isolation test approach

How the server-injected tenant boundary is tested.

AI data-flow note

The four gates, masking, providers and what is recorded for every AI call.

Hosting facility certificates

ISO 27001 and SOC 2 certificates held by the India data centre that hosts kymeer.

Data-processing terms

Processor terms for DPDP and GDPR contexts.

Sub-processor list

Published when confirmed; available on request until then.