Security, stated as controls.
No certification is claimed. What is in place is listed, page by page, so a buyer or a procurement team can check it.
- Your account
Every system runs in an AWS or Google Cloud account in your company’s name. KYN’s role is revocable by you in one action.
- One role per job
Named accounts for people, one service identity per agent, each scoped to its task. No shared logins.
- A person approves
Outbound messages, money, filings and deletions wait for a named approver. Agents draft, sort, remind and report.
- Everything logged
Input, model, output, time and approver, in your account, readable without KYN.
The four pages.
- Security principles →
Five principles every KYN system is built on, and the control behind each. No certification is claimed; the controls are listed so a buyer or a procurement team can check them.
- Personal data protection (PDPA) →
KYN builds systems that process personal data on behalf of the client, who is the organisation responsible under the Personal Data Protection Act 2012. This page states what that means in practice.
- AI governance: what an agent may do alone →
An agent that sends on its own is the risk, not the feature. Every KYN agent runs under one rule: it may read, draft, sort, remind and report by itself, and anything that leaves the company waits for a named person. This page states the rule, the gates and the controls.
- Vendor security FAQ →
The answers a procurement or IT team needs, in the order a vendor questionnaire asks them. Where the honest answer is no, it says no.