Security & trust
Institutional-grade, because the decisions are.
Kilwa is used inside investment and risk processes that are themselves audited. The platform is built to pass that scrutiny.
Controls
How the platform is secured.
End-to-end encryption
All data is secured with AES-256 encryption in transit and at rest, meeting the standard institutional security reviews expect.
Role-based access control
Granular permissions across teams and coverage universes, so analysts, portfolio managers and risk functions see what they should.
Audit trails
Query and access activity is logged, supporting internal governance and external review requirements.
Explainable AI transparency
Every score decomposes into its drivers. Transparency is a security-adjacent control: a result no one can interrogate cannot be governed.
Frameworks
Aligned, and precise about what that means.
Kilwa's controls are built and maintained against these frameworks continuously, rather than assembled for an audit window. We describe that as alignment, because alignment is what it is.
Where Kilwa holds a formal certification, it is listed separately below and we name the body that issued it. We would rather your risk team find the distinction here than discover it in a questionnaire.
- SOC 2 Type II
- Controls aligned to the security, availability and confidentiality criteria
- GDPR
- Practices aligned to EU data protection requirements
- CCPA
- Practices aligned to California consumer privacy requirements
- ISO 27001
- Information security management alignment
Certifications held
- SDVOSB
- SBA-certified Service-Disabled Veteran-Owned Small Business
- VOSB
- Veteran-Owned Small Business certification
Issued by the U.S. Small Business Administration.
At a glance
Security posture, in numbers.
AES-256
encryption in transit and at rest
SOC 2
Type II controls, aligned
RBAC
role-based access across teams
100%
of model inputs provenance-flagged
Due diligence
Send us your security questionnaire.
We'd rather answer your risk team's questions early than late. Get in touch and we'll route it to the right people.