Security

Traffic to the platform is encrypted in transit using TLS. Data at rest is encrypted by our managed cloud infrastructure providers.

Accounts use managed authentication with role-based permissions. Internal access follows least-privilege principles and is limited to what is needed to operate and support the service.

The platform runs on reputable managed cloud infrastructure with separated environments, automated backups and monitored deployments.

Full payment card data is never stored by Kama. Payment credentials remain with the licensed third-party payment provider connected to your account.

Please report suspected vulnerabilities through our contact form. Do not perform testing that could affect other customers' data or availability.