Security

Infrastructure

All Services run on ISO 27001-certified cloud infrastructure with data centres in Mumbai (default), Frankfurt and Virginia. Environments are isolated per tenant with network-level segmentation.

Encryption

TLS 1.2+ for all traffic; AES-256 for data at rest, backups and exports. Passwords are hashed with bcrypt; API keys are shown once and stored hashed.

Access control

Role-based permissions in every product, optional two-factor authentication, SSO (SAML/OIDC) on Premium plans, and audit logs of administrative actions.

Backups and continuity

Encrypted backups every 6 hours retained for 30 days, with tested restore procedures and a 4-hour recovery time objective.

Payments

Card data never touches Akontec servers. Payments are processed by PCI-DSS Level 1 providers.

AI safety

AI agents answer only from customer-approved knowledge, run inside configurable action limits, log every conversation, and escalate to humans on uncertainty. Customer data is not used to train shared models.

Reporting a vulnerability

Email security@akontec.com. We acknowledge reports within 2 business days and do not pursue researchers acting in good faith.