Platform security

Security is built into every architecture decision and every deployment.

We apply least privilege and multiple protection layers around access, data and workflows.

The application runs on European infrastructure with strict environment separation.

Databases, backups and logs are monitored and protected with role-based access.

TLS 1.3 is enforced in transit and sensitive secrets are encrypted at rest.

Passwords are hashed and payment data is handled exclusively by Stripe.

Sessions are protected through HttpOnly cookies and server-side checks.

Roles, human approvals and audit logs restrict access to sensitive actions.

In case of an incident, we isolate, assess and notify according to applicable requirements.

A post-mortem and corrective measures are produced for every critical incident.

For any security disclosure or data protection question, contact contact@krysme.com.