Snapshot 29450
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Ask for information Overview Kedify helps teams manage Kubernetes autoscaling. This Trust Center explains how we protect the hosted platform and support its availability, and provides access to our security documentation. Compliance SOC 2 Type 2 Documents COMPLIANCESOC 2 Type 2 Risk Profile We assess security and availability risks, track remediation, and maintain business continuity and disaster recovery plans. Product Security The Kedify Autoscaling Platform combines a hosted service with an agent in customer-managed Kubernetes clusters. Dashboard access is authenticated, and the agent communicates through secure outbound connections. Data Security Data protection Access Monitoring App Security We perform vulnerability scanning and independent penetration testing, and track identified issues through remediation. Legal Subprocessors Privacy Policy Terms of Use Data Privacy Kedify collects contact and product usage information to provide and support its services. Our Privacy Policy covers information we collect directly; processing on behalf of customers is governed by our customer agreements. Access Control We use role-based, least-privilege access, require multifactor authentication for sensitive systems, and periodically review access rights. Infrastructure Our hosted platform runs on Google Cloud infrastructure, with Cloudflare supporting network services. We monitor the service and use redundant infrastructure to support availability. Endpoint Security Company workstations are subject to security requirements, including disk encryption and malware protection. Network Security Network access restrictions, firewalls, encrypted connections, logging, and intrusion detection help protect our hosted services. Corporate Security Our security program includes documented policies, assigned responsibilities, employee training, risk assessment, and vendor review. Policies We maintain approved security policies covering areas such as access control, incident response, risk management, and business continuity. Employees acknowledge relevant policies. Incident Response We maintain an incident response plan with defined responsibilities and procedures, and test the plan annually. Risk Management We perform an annual risk assessment, track remediation, and review key vendors and their security documentation. Asset Management We classify and manage information assets, restrict access to systems, and apply security requirements to company workstations. BC/DR We maintain business continuity and disaster recovery plans, monitor daily backups, and test recovery arrangements annually. Training Full-time employees complete security awareness training annually and acknowledge security policies when hired. Change Management Changes are tracked in version control and pass development, testing, and release checks before production deployment. Physical & Environment Our critical production infrastructure is hosted by Google Cloud, which provides the underlying data center physical and environmental controls. Continuous Monitoring Monitoring practices Intrusion Detection System (IDS) Subprocessors If you need help using this Trust Center, please contact us. Contact support If you think you may have discovered a vulnerability, please send us a note. Report issue