Trust Center
Kedify helps teams manage Kubernetes autoscaling. This Trust Center explains how we protect the hosted platform and support its availability, and provides access to our security documentation.
Risk Profile
We assess security and availability risks, track remediation, and maintain business continuity and disaster recovery plans.
Product Security
The Kedify Autoscaling Platform combines a hosted service with an agent in customer-managed Kubernetes clusters. Dashboard access is authenticated, and the agent communicates through secure outbound connections.
App Security
We perform vulnerability scanning and independent penetration testing, and track identified issues through remediation.
Data Privacy
Kedify collects contact and product usage information to provide and support its services. Our Privacy Policy covers information we collect directly; processing on behalf of customers is governed by our customer agreements.
Access Control
We use role-based, least-privilege access, require multifactor authentication for sensitive systems, and periodically review access rights.
Infrastructure
Our hosted platform runs on Google Cloud infrastructure, with Cloudflare supporting network services. We monitor the service and use redundant infrastructure to support availability.
Endpoint Security
Company workstations are subject to security requirements, including disk encryption and malware protection.
Network Security
Network access restrictions, firewalls, encrypted connections, logging, and intrusion detection help protect our hosted services.
Corporate Security
Our security program includes documented policies, assigned responsibilities, employee training, risk assessment, and vendor review.
Policies
We maintain approved security policies covering areas such as access control, incident response, risk management, and business continuity. Employees acknowledge relevant policies.
Incident Response
We maintain an incident response plan with defined responsibilities and procedures, and test the plan annually.
Risk Management
We perform an annual risk assessment, track remediation, and review key vendors and their security documentation.
Asset Management
We classify and manage information assets, restrict access to systems, and apply security requirements to company workstations.
BC/DR
We maintain business continuity and disaster recovery plans, monitor daily backups, and test recovery arrangements annually.
Training
Full-time employees complete security awareness training annually and acknowledge security policies when hired.
Change Management
Changes are tracked in version control and pass development, testing, and release checks before production deployment.
Physical & Environment
Our critical production infrastructure is hosted by Google Cloud, which provides the underlying data center physical and environmental controls.