Platform Security

Konektor applies security controls to help protect infrastructure, applications, and your workspace data.

Security Infrastructure

Data Encryption

• Data at Rest: Using AES-256 encryption for all databases and backups.
• Data in Transit: All communication is protected with strong TLS 1.3 (HTTPS).

Access Control

• Role-Based Access Control (RBAC): Limit team access according to roles (Admin, Editor, Viewer).
• Two-Factor Authentication (2FA): Workspace Owner, Admin, Staff, and Viewer accounts, as well as platform Super Admin and Admin accounts, use the same account security controls on their Profile page. Users connect an authenticator app and save the one-time recovery codes when they enable 2FA.
• Per-Account Session Timeout: Each account selects a 1, 7, or 30-day session duration. Platform security settings do not override the account choice.
• Audit Logs: Activity trail for accountability (Enterprise Plan).

Network Protection

We use Cloudflare Enterprise for protection against:

• DDoS Attacks (L3/L4)
• Web Application Firewall (WAF)
• Malicious Bot Protection

Security Evidence and Review

Security Documents

Konektor lists available account and workspace security controls in this guide. Contact Konektor support if your team needs current security documents for procurement review.

Internal Review

The Konektor team reviews access controls, session settings, and the vulnerability reporting path regularly. This guide only describes controls available to users.

Backups & Disaster Recovery

• Daily Backups: Databases are automatically backed up daily.
• Point-in-Time Recovery: Ability to restore data to a specific second in the last 30 days.
• Geo-Redundancy: Backups are stored in different physical locations for disaster resilience.

Reporting Security Vulnerabilities

If you find a security vulnerability in our platform, please report it via our Bug Bounty program or email directly to security@konektor.id.

Next Steps

• Team & Access Management
• GDPR Policy