Compliance
Which laws and frameworks apply, and where KiviDB stands on each. KiviDB holds no certification. Nothing on this page is one.
Certifications and audits
| Framework | Status | Detail |
|---|---|---|
| SOC 2 | Not held | No audit has been performed or started. |
| ISO/IEC 27001 | Not held | No certification has been performed or started. |
| Penetration test | Not done | No independent test has been performed. |
| HIPAA | Not supported | KiviDB does not sign business associate agreements. Do not store protected health information. |
| PCI DSS | Limited | KiviDB does not store, process or transmit card data; payments are handled by Razorpay. KiviDB Cloud is not assessed for storing cardholder data in your database. Do not store it. |
Self-assessments
A self-assessment is a questionnaire a company answers about itself. It is not an audit.
| Assessment | Status |
|---|---|
| Cloud Security Alliance STAR Level 1 (CAIQ) | Not yet submitted |
| PCI DSS Self-Assessment Questionnaire A, as a merchant | Not yet completed |
This page will say so, and link to the result, when either is done.
Privacy law
| Law | Where KiviDB stands |
|---|---|
| GDPR (EU and UK) | KiviDB is a processor for personal data you store in your database and a controller for account data. A Data Processing Agreement incorporating the EU Standard Contractual Clauses is available. KiviDB is established in India, which has no EU adequacy decision; account data is stored in Germany. |
| Digital Personal Data Protection Act 2023 (India) | KiviDB is an Indian company and a data fiduciary for account data. A grievance contact is named in the Privacy Policy. |
| CCPA / CPRA (California) | KiviDB does not sell or share personal information. Rights are set out in the Privacy Policy. |
Hosting providers
Customer databases run in data centres operated by Amazon Web Services, Google Cloud and Microsoft Azure. Those providers hold their own certifications, including SOC 2 and ISO/IEC 27001, for their facilities and infrastructure. Their certifications cover their services. They do not certify KiviDB.
Security questionnaires
If your review needs answers this site does not give, send the questionnaire to security@kividb.io.