Your people data is the most sensitive data you hold. We treat it that way.
How Kivos protects your plan, your salaries and your decisions. Each statement below describes what the product does today, and the status column says how it has been verified.
Access and identity
Single sign-on
Sign-in uses OpenID Connect with PKCE through a managed identity service. Connecting your own identity provider is coming soon.
Status: In product
Role and capability based access
Fifteen named capabilities decide who can plan, approve, view cost or administer. Scope follows your organisation structure.
Status: In product
Tenant isolation
Every record carries its tenant in its database key, so one customer's data cannot be joined to another's.
Status: In product
Salary privacy
Minimum group of three
No cost figure, subtotal, difference or average is shown for fewer than three people. You can raise the minimum, never lower it.
Status: In product
Individual pay by permission
A single person's salary and loaded cost are visible only to roles you allow.
Status: In product
Access audit
Reports and exports are recorded, so you can see who looked at what.
Status: In product
Financial integrity
Frozen approved versions
Approved budgets and forecasts store their figures month by month and reproduce exactly.
Status: In product
Approval routes fail closed
A request that matches no route is stopped, not passed.
Status: In product
Independent reconciliation testing
Calculations are checked against an independently built reference workbook.
Status: Tested
Data and hosting
Where your data lives
In the UK. The application runs on Microsoft Azure in UK South, the database is Neon PostgreSQL in London, and sign-in uses an Auth0 UK tenant.
Status: In product
Subprocessors
Microsoft Azure for hosting, Neon for the database and Auth0 (Okta) for sign-in.
Status: In product
Encryption, backup and retention
Encrypted in transit, including certificate-checked connections to the database, and encrypted at rest by the database provider. Published backup, retention and deletion schedules are coming soon.
Status: In progress
AI and agents
Same rules for agents as for people
AI assistants reach Kivos through the same permissions, scope and audit as the person they act for. Read only first.
Status: By design
Your data is not used to train models
Kivos sends none of your data to AI model providers, so it cannot be used to train their models.
Status: By design
Compliance
UK GDPR
Our data processing agreement, setting out who is controller and who is processor of your people data, is coming soon.
Status: Coming soon
Independent security testing
Every change is checked by automated static analysis, secret scanning and dependency vulnerability scanning. Independent penetration testing and certification are coming soon.
Status: Coming soon
Accessibility
WCAG 2.2 Level AA
Kivos and this website are designed and developed toward WCAG 2.2 Level AA. A conformance report will follow an independent audit.
Status: In progress
Documents
Security questionnaire, architecture overview and data processing agreement: coming soon. Questions in the meantime? Email info@kivos.co.uk.
Found a vulnerability? Write to info@kivos.co.uk.
Last reviewed 21 October 2026