Data stays in the country
Data of companies from Kazakhstan is stored on servers in Kazakhstan, in line with the Kazakh personal data law. Clients from other countries get a separate region in their own country.
Security and data
Your orders, customers and routes are trade secrets. We design the system so that nobody can see them by accident or on purpose.
Database-level company isolation
Every row belongs to a company, and a PostgreSQL security policy (Row-Level Security) prevents reading other companies’ rows — even if the code has a bug. Every table has an automated isolation test.
Sign-in and permissions
Two-factor authentication is mandatory for administrators. Roles and permissions are set by the company administrator, and nobody can grant more rights than they have.
Activity log
Sign-ins, permission changes, exports, API actions and support access to your company are logged.
Encryption
HTTPS only. Passwords are stored as Argon2id hashes; backups are encrypted.
Backups
Point-in-time database recovery and regular restore tests.
Documents
PlaceholderThe contract, data processing agreement and service level agreement (SLA) are being prepared for launch.