Protect the knowledge without exposing the person.
KEPT is built to keep customer knowledge separated, restrict access, and maintain evidence of important security and data events.
Current controls
Workspace isolation
Customer information is scoped by workspace. Database row-level security and service authorization are designed to deny cross-workspace access by default.
Role-based access
Administrative actions and knowledge access depend on authenticated roles and explicit permissions. Knowledge-sharing grants are scoped to the people and workspace involved.
Private attachment storage
Uploaded files are stored in private object storage and retrieved through authorized service paths. Deleting an attachment is designed to queue its stored file for removal.
Protected service boundaries
The public web application communicates with dedicated control-plane and AI services. Secrets and provider credentials are held in managed deployment environments rather than shipped to the browser.
Auditing
KEPT is built to record important authorization, security, consent, deletion, and model-processing events to support investigation and accountability.
AI-provider controls
AI requests are routed through KEPT's model gateway and recorded in an operational ledger. Customer content is not intentionally used by KEPT to train a generalized model. Provider retention and no-training terms are governed by KEPT's provider agreements and live account configuration.
Data deletion
KEPT builds audited deletion paths for captured partner data and private attachments. Some limited billing, audit, security, consent, or legal records may be retained when permitted or required.
Security contact
To report a suspected vulnerability or security issue, contact support@kept.solutions. Please do not include active credentials or customer data in the initial message.