Your compliance data deserves enterprise-grade security.
Kreto is built from the ground up with security, privacy, and data integrity as core requirements — not afterthoughts.
Security Features
AES-256 Encryption at Rest
Every document, payroll file, and data record is encrypted with AES-256 before storage. Encryption keys are managed by AWS KMS with automatic rotation.
TLS 1.3 in Transit
All data transmitted between your browser and our servers is encrypted with TLS 1.3 — the latest and most secure transport protocol available.
PII Redaction Before AI
Social Security Numbers, EINs, bank account numbers, and routing numbers are automatically redacted before any document is sent to our AI pipeline. The AI never sees raw PII.
AWS Infrastructure
All services run on AWS with VPC isolation, private subnets, encrypted EBS volumes, and comprehensive access logging. All data remains on US-based infrastructure.
Row-Level Security (RLS)
Every database table enforces tenant isolation at the row level. Your data is physically inaccessible to other tenants — not just hidden by application logic.
Human-in-the-Loop
No AI-generated response is ever sent to a government agency without explicit human review and approval. AI assists. Humans decide.
Append-Only Audit Trail
Every action is logged to an immutable audit table with SHA-256 hash verification. Audit records cannot be modified or deleted — even by administrators.
Access Controls
Role-based access control with two roles: CPA members see all entities in their tenant, client users see only their own entities. No cross-tenant data leakage.
Certifications & Integrations
SOC 2 Type II
In ProgressSecurity, availability, and confidentiality controls audit, in progress with Coalfire.
SIDES E-Response
Infrastructure ReadySIDES-compatible infrastructure built. NASWA certification in progress for electronic UI claims across 47 states and DC.
NASWA
Certification In ProgressNational Association of State Workforce Agencies integration for multi-state unemployment compliance.
Need our security documentation?
Contact us for our security whitepaper, penetration test results, or to discuss your specific compliance requirements.
Contact Security Team →