Security
Built to hold your audit evidence and your vendors' answers.
A GRC platform holds some of your most sensitive documents. Here's how KashiGuard protects them.
How we protect it
Your data, who sees it, and the record of what happened.
Your data
- Files are stored privately and encrypted at rest with managed keys
- Downloads use short-lived links
- File versions are kept when a document is replaced
Who can see what
- Each organisation’s data is kept separate from every other organisation’s
- Audit firms see only what a client grants, and firms can’t see each other
- Roles, permissions and per-user overrides
- Segregation-of-duties rules stop one person creating and approving the same record
Accountability
- History on records: who changed what, and when
- Workflow history on every approval
- Access reviews and exceptions with expiry, for your own programme
AI
- Uploaded third-party documents are scanned for hidden instructions aimed at the AI
- Personal identifiers are tokenised before a prompt leaves KashiGuard
- AI suggestions are reviewed by a person before they’re used
- AI model providers are listed as sub-processors
Need more for your security review?
We'll share our security documentation and answer your questionnaire.