Security at KiteCX

Your data protection is our top priority. Built with enterprise-grade security from the ground up.

Encryption

All data is encrypted in transit using TLS 1.2+ and at rest. Every API call and webhook is served over HTTPS.

Authentication

Secure session management with Firebase Auth. Multi-workspace support with role-based access control per workspace.

Infrastructure

Hosted on Google Cloud Platform with automatic scaling, redundancy, and 24/7 monitoring. Built for uptime.

Access Control

Granular, role-based permissions — admin, manager, and member. Workspace-level access ensures teams only see what they should.

Data Protection

  • PII masking in all server logs — emails and phone numbers are never stored in plain text in logs
  • Rate limiting on all API endpoints to prevent abuse and brute-force attacks
  • HSTS headers enforced across all connections
  • Firestore security rules restrict client-side access to authenticated reads only
  • All server-side operations use the Firebase Admin SDK, bypassing client-side rules entirely
  • Secure session cookies with HttpOnly, SameSite, and Secure flags

Compliance

GDPR—Fully compliant with EU data protection regulations. Learn more →
TCPA / CTIA—SMS messaging follows all US telecommunications regulations.
PCI DSS—Payment processing handled by Stripe, a PCI Level 1 service provider.
Data Processing—Data Processing Agreements available for enterprise customers. Learn more →

Third-Party Security

KiteCX integrates with trusted, security-certified vendors. Each maintains their own rigorous security programs:

  • Google Cloud / Firebase — SOC 1, SOC 2, SOC 3, ISO 27001
  • Stripe — PCI Level 1 Service Provider
  • Twilio — SOC 2, ISO 27001
  • Resend — SOC 2
  • OpenAI — SOC 2

Report a Vulnerability

We take security seriously. If you discover a vulnerability, please report it responsibly by emailing security@kitecx.io. We appreciate your help keeping KiteCX and our customers safe.

Ready to get started?

Set up your workspace in minutes. No credit card required.

Start Free Trial →
← Back to home