Security information for clients and auditors
How we protect client environments
Each client app runs on its own virtual machine, with daily backups, managed updates, encrypted connections, and data export available at any time. You can use these details in client security questionnaires.
1 VM
for each client app
Daily
automatic backups for each client
30
days of backup retention
24/7
instance monitoring
How we operate the service
Six security and reliability practices
Each practice is described in more detail on its linked platform page.
Separate client environments
Each client app has its own machine, database, and storage.
How isolation works →
Backed up every day
A full backup for each client is retained for 30 days. We handle restores.
How backups work →
Updates across the fleet
We apply updates to every client instance, prioritizing security fixes.
How patching works →
Monitored around the clock
We monitor each instance and respond when checks fail.
How monitoring works →
Portable client data
Export client data in standard formats. We do not sell or use it for advertising.
About data portability →
Separate portal access
The partner portal shows your full fleet. Each client portal shows only that client’s apps.
How the two portals work →
If your questionnaire includes a question we have not answered, emailinfo@kosnomos.com for a written response.
Questions and answers
Common questions about isolation and data safety
- Is one client’s data isolated from another’s?
- Yes. Every client app runs on its own virtual machine, with its own application, database, storage, and domain. Clients do not share a machine or database, which removes shared tables and queries between client environments.
- Are client instances backed up?
- Yes. Every client instance is backed up automatically each day, and copies are retained for 30 days. A restore applies to one client without affecting the rest of the fleet.
- Who applies security fixes?
- Kosnomos applies updates across your client fleet as they are released, with security fixes prioritized. Your team does not need to track and patch each client separately.
- Can a client’s data be moved out later?
- Yes. The software is open source and the data belongs to your client. You can export a client at any time in standard formats, with no waiting period or exit fee.
- Who at Kosnomos can see a client’s data?
- Your client and the people they invite can access their data, as can you as their partner. Kosnomos staff access an instance only to resolve a reported problem or operate the service. We do not sell client data, use it for advertising, or contact your clients — and we never sell to your clients, ever.
- Can one client see another client in the portal?
- No. Your partner portal shows every client you manage, while each client portal is limited to that client’s apps. Each client app runs on its own virtual machine with its own database. The client portal does not show other clients, your fleet, or your costs.
- What happens to a client’s data when they cancel?
- You can export the data the client needs. After the instance is removed, we delete its data from our systems.
Built around your clients
Start with one client app
Launch it in about ten minutes. We handle hosting, updates, backups, and monitoring.