At Krondiva, protecting your data is not just a compliance obligation — it is central to how we build and operate KronGage. This page outlines our data protection practices, certifications, and your rights as a data subject.
Our Certifications
How We Protect Your Data
KronGage employs multiple layers of security to safeguard customer data:
- Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256.
- Access controls: Role-based access control (RBAC) ensures employees only access data necessary for their role.
- Audit logging: Every data access and modification is logged with tamper-evident audit trails.
- Regular penetration testing: We engage independent security firms to conduct annual penetration tests.
- Vulnerability management: Continuous scanning and patching of known vulnerabilities.
Data Residency
KronGage supports regional data residency options. Enterprise customers can select their preferred data region at the time of onboarding. We currently support data hosting in the EU, UK, and Africa regions.
GDPR Compliance
For customers operating in the European Economic Area (EEA) or United Kingdom, Krondiva acts as a Data Processor on your behalf. We provide a Data Processing Agreement (DPA) that governs how we handle personal data. Contact us to request a copy of our DPA.
Data Breach Response
In the event of a data breach affecting your information, Krondiva will notify affected customers within 72 hours of becoming aware of the breach, in compliance with GDPR Article 33 requirements.
Sub-processors
We use a limited number of vetted sub-processors to deliver our services. A full list of our sub-processors is available upon request. All sub-processors are bound by data protection obligations no less stringent than our own.
Contact Our Data Protection Team
For data protection enquiries, please contact our Data Protection Officer at dpo@krondiva.com or via our Contact page.