CONFIDENTIALITY & SECURITY
Keeping what you
entrust to us safe.
Protecting your records is the foundation of our business. Here is how we think about it and our main safeguards. Specific settings are not published, to keep them effective.
CONFIDENTIALITY
We don't read it. We don't hand it over.
Your records are yours
What you store belongs to you.
We don't read the contents
We don't look at the contents of your records, except at your request or when needed to resolve a fault.
No outside AI
Our maintenance work never feeds your records or logs to outside AI services.
No disclosure to third parties
[Wording with legal exceptions, after review by counsel]
SAFEGUARDS
Fewer doors. Separate records. Nightly backups.
| Area | Safeguard |
|---|---|
| Separation | On the Personal plan, each customer's records are stored separately and are not visible to anyone else. KURA Dedicated runs on a server for your company alone. Servers are located in Japan. |
| Entry points | Only the entry points we need are open. Reads and writes from an AI are accepted only after you sign in and grant permission. |
| Encryption | Traffic between you and KURA is encrypted. Backups are stored encrypted, with the keys kept separately from the servers. |
| Logging & monitoring | Sign-ins and operations are logged and checked for unusual activity. On the Personal plan, records containing IP addresses are deleted within 30 days. For KURA Dedicated, retention is agreed in your contract. |
| Backup & recovery | Backups are taken nightly (kept up to 12 months on the Personal plan; for KURA Dedicated, as agreed in your contract). We check that we can actually restore from them. |
| Change control | Setup and updates follow fixed procedures and are tested in a staging environment first. |
SHARED RESPONSIBILITY
Security is something we keep together.
| What we do | What we ask of you |
|---|---|
| Protect and check servers, traffic and backups | Don't share your password or reuse it on other services |
| Keep KURA updated and respond to vulnerabilities | Don't store passwords or PINs themselves in your records |
| Detect and respond to incidents, and notify you | Choose your AI service and manage its settings |
IF SOMETHING HAPPENS
We stop it at once, and tell you.
When we notice an incident or suspect one, we immediately put the system into emergency maintenance to contain it.
We post updates on our Service status page, then report the cause, scope and response.
Found a security issue or something suspicious? Please let us know at support@ssoffice.com.