Security

Trust & Security

KamiMind is built for Vietnamese enterprises that demand the highest standards of data protection, compliance, and operational security.

Data Protection

  • Full compliance with Vietnam PDPD 2023 (Personal Data Protection Decree)
  • Customer data encrypted at rest (AES-256) and in transit (TLS 1.3)
  • Strict data isolation between tenants — no cross-tenant data leakage
  • Automated data retention and deletion policies per customer requirements

Infrastructure Security

  • End-to-end encryption for all API calls and internal services
  • Enterprise SSO with SAML 2.0 and OpenID Connect support
  • Role-based access control (RBAC) with granular permission management
  • Regular penetration testing and vulnerability assessments

Compliance & Audit

  • SOC 2 Type II audit in progress — expected completion Q3 2026
  • Comprehensive audit logs for all user and system actions
  • Exportable compliance reports for internal governance teams
  • Incident response SLA with documented escalation procedures

Data Residency

  • Primary hosting in Vietnam-based data centers for local compliance
  • Multi-region deployment options for APAC enterprises
  • Data sovereignty controls — choose where your data lives
  • Disaster recovery with geo-redundant backups

Have questions about our security practices? Our team is happy to walk you through our controls and provide documentation.