Platform Security

Konektor applies security controls to help protect infrastructure, applications, and your workspace data.

Security Infrastructure

Data Encryption

• Data at Rest: Konektor databases and file storage run on Cloudflare, which encrypts stored data with AES-256.
• Data in Transit: All communication uses HTTPS. Browsers must always use HTTPS to reach konektor.id.
• PII Protection: Sensitive Lead and User data (Name, Email, Phone) and Inbox message content are encrypted with field-level AES-256-GCM before storage.
• Hashing for Blind Index: We use SHA-256 hashing for Email and Phone. This lets us search data quickly without decrypting the original value (Blind Indexing) and sync safely with ad platforms (Meta & Google Ads).

Access Control

• Role-Based Access Control (RBAC): Limit team access by workspace role (Owner, Admin, Staff, Viewer).
• Two-Factor Authentication (2FA): Workspace Owner, Admin, Staff, and Viewer accounts, as well as platform Super Admin and Admin accounts, use the same account security controls on their Profile page. Users connect an authenticator app and save the one-time recovery codes when they enable 2FA.
• Recent 2FA Verification: Sensitive actions request a recent code when 2FA is active. Verification remains valid for 15 minutes in the same session.
• Per-Account Session Timeout: Each account selects a 1, 7, or 30-day session duration. Platform security settings do not override the account choice.
• Workspace Boundary: Each data request is checked against your workspace and role before data is read or changed.

Network Protection

Konektor runs on the Cloudflare network. Cloudflare filters DDoS attacks before they reach the application. Konektor checks the signature of each webhook from a partner platform before it processes the webhook.

Security Documents

This guide only describes controls available to users. Contact Konektor support if your team needs security documents for procurement review.

Backups & Recovery

• 30-Day Database History: Cloudflare keeps a 30-day history of database changes. We can restore a database to a specific minute in the last 30 days.
• Separate Backup Copies: The Konektor team makes backup copies of the databases outside Cloudflare and has tested restores from those copies.

Reporting Security Vulnerabilities

If you find a security vulnerability in our platform, send a report to security@konektor.id.

Next Steps

• Team & Access Management
• Data Rights and Privacy
• Wulan Privacy and Notifications