Security
Enterprise-Grade Security
At KornexAI, protecting your data is not a feature — it's a foundational commitment. We build security into every layer of our platform, from infrastructure to application code, so you can innovate with confidence.
Defense in depth
Security at every layer
Five independent layers protect your books, payroll and customer data. If one control fails, the next one still holds.
Data protection
Multi-layered data protection
Every piece of data that enters our platform is safeguarded through a comprehensive, defense-in-depth strategy.
Encryption at Rest
All data stored in our systems is encrypted using AES-256, the gold standard used by financial institutions and governments worldwide.
Encryption in Transit
Every data exchange between your browser and our servers is protected with TLS 1.3, ensuring intercepted traffic remains unreadable.
Data Isolation
Each tenant's data is logically separated with strict isolation boundaries. Your data never co-mingles with other customers' information.
Key Management
Encryption keys are managed through a dedicated Hardware Security Module (HSM) with automatic rotation and strict access controls.
1// AES-256-GCM Encryption2const encryptionConfig: EncryptionConfig = {3 algorithm: 'AES-256-GCM',4 keyLength: 256,5 mode: 'GCM',6 keyRotation: '90d',7 hsm: true,8};9 10// TLS 1.3 Configuration11const tlsConfig = {12 version: 'TLS 1.3',13 cipherSuites: [14 'TLS_AES_256_GCM_SHA384',15 'TLS_CHACHA20_POLY1305',16 ],17 hsts: 'max-age=63072000',18};AES-256 Encryption
The same standard used by the U.S. government for classified information. Every file, message, and data point is encrypted before being written to disk.
TLS 1.3 Protocol
The latest and most secure transport layer protocol, eliminating legacy cipher suites and providing perfect forward secrecy for all connections.
End-to-End Encryption
Sensitive data such as API keys, credentials, and private models are encrypted end-to-end — even our infrastructure team cannot access plaintext.
Access control
Granular access control
Fine-grained permission management ensures the right people have the right access — and nothing more.
Role-Based Access Control (RBAC)
Define custom roles with precise permission sets. Admins, editors, viewers, and custom roles — each with tailored access levels.
Two-Factor Authentication (2FA)
Enforce 2FA across your organization using authenticator apps, hardware security keys (WebAuthn), or SMS as a fallback.
Single Sign-On (SSO)
Seamless integration with your identity provider via SAML 2.0 and OpenID Connect (OIDC). Supports Okta, Azure AD, Google Workspace, and more.
Session Management
Configurable session timeouts, device tracking, and one-click session revocation. Users can view and terminate active sessions.
IP Whitelisting
Restrict access to approved IP addresses or CIDR ranges. Block unauthorized networks from accessing your workspace.
Infrastructure & compliance
Infrastructure & compliance
Our platform runs on hardened, globally distributed infrastructure built for resilience and regulatory compliance.
SOC 2 Type II Certified
Independently audited to meet rigorous standards for security, availability, processing integrity, confidentiality, and privacy.
GDPR Compliant
Full compliance with the EU General Data Protection Regulation, including data processing agreements and cross-border transfer safeguards.
Multi-Region Data Centers
Data is stored and processed in geographically distributed data centers across North America, Europe, and Asia-Pacific.
Compliance certifications
| Framework | What it covers | Status |
|---|---|---|
| SOC 2 Type II | Independently audited by a Big Four firm. Our controls meet the Trust Services Criteria for security, availability, and confidentiality. | Certified |
| GDPR | Full compliance with EU data protection law including DPA agreements, data subject request handling, and cross-border transfer mechanisms. | Compliant |
| CCPA | Compliant with the California Consumer Privacy Act. California residents can exercise their rights to know, delete, and opt-out. | Compliant |
| HIPAA | We are actively pursuing HIPAA certification to serve healthcare organizations. BAA agreements and PHI safeguards are in development. | Coming Soon |
Privacy & resilience
Privacy, resilience & monitoring
Privacy is embedded into every product decision. Our monitoring and backup systems ensure your data is always protected and recoverable.
Data Minimization
We only collect data strictly necessary to deliver our services. No excessive data harvesting or profiling.
Purpose Limitation
Data collected for one purpose is never repurposed without explicit consent. Every data use is documented and bounded.
Privacy Impact Assessments
Every new feature undergoes a formal Privacy Impact Assessment (PIA) before launch to identify and mitigate risks.
Automated Daily Backups
Backups run automatically every 24 hours with incremental snapshots to minimize data loss windows.
Point-in-Time Recovery
Recover your data to any specific moment — down to the second — for the past 30 days with full transactional integrity.
Geo-Redundant Storage
Backup copies are stored in geographically separated data centers, ensuring survivability even during regional disasters.
Operations
24/7 security operations
Real-Time Monitoring
Security event monitoring with dedicated security operations analysts around the clock.
Intrusion Detection
Advanced IDS/IPS systems detect and block suspicious activity before it reaches your data.
Incident Response
Documented response plan with defined SLAs, escalation paths, and post-incident reviews.
Report a security vulnerability
We appreciate the efforts of the security research community. If you believe you've discovered a vulnerability, we encourage you to let us know responsibly.
- Report vulnerabilities via encrypted email to our security team.
- Do not publicly disclose until we have resolved the issue.
- We acknowledge reports within 24 hours and provide a timeline within 72 hours.
[email protected]
PGP Key
Available on request
Run your whole business on one platform
Start free for 14 days. Send your first invoice in minutes and see every number in one place.
- 14-day free trial
- No credit card
- Cancel anytime