Trust & Security

Kama provides cloud software for business operations: billing, invoicing, subscription management, customer self-service, reporting and workflow automation. Customers license the software on a subscription basis.

Payment processing is performed by licensed third-party providers such as Stripe. Customers connect their own provider account. Kama sends instructions and reads status through the provider's API; it does not act as a processor, acquirer, aggregator or payment facilitator.

Kama does not:

• hold funds
• receive deposits
• operate wallets
• transmit money
• custody assets

Funds move directly between the payer, the licensed payment provider and the customer's own bank account. Kama is never a party in that flow.

• Encryption. Data is encrypted in transit with TLS and encrypted at rest by our cloud infrastructure providers.
• Secure authentication. Access is protected by managed authentication with role-based permissions and least-privilege defaults.
• Cloud infrastructure. The platform runs on managed, reputable cloud infrastructure with isolated environments and audited access.
• Privacy-first architecture. We collect the minimum data required to operate the software, and we do not store full payment card data — that remains with the licensed payment provider.

If you believe you have found a vulnerability, contact us through our contact form and we will respond as quickly as we can.