Security & Data Ownership

Your data, protected to a production standard.
And it’s yours to take, anytime.

Kliio connects to the platforms your business already runs on and builds one private record of your audience. That record is sensitive, so we treat it that way. Here is exactly how your data is protected, and how we keep it yours.

Credentials AES-256-GCM

Passwords bcrypt

Transport TLS + HSTS

Export one click

How your data is protected

Your credentials are encrypted.

Every platform key and access token you connect is encrypted with AES-256-GCM before it is ever written to the database. Keys are never shown back to you and never appear in logs.

Your account is walled off.

Your data is isolated from every other creator on Kliio. Every query is scoped to your account, and automated isolation tests fail our build if a single query could ever cross that line.

Hardened sign-in.

Passwords are hashed with bcrypt. Sessions are signed and can be revoked server-side, so a password reset or a removed teammate cuts off outstanding access. Logins and sensitive actions are rate-limited.

Locked-down stack.

Everything runs over HTTPS with HSTS and clickjacking protection enabled. All database access is fully parameterized, which closes off SQL injection by construction.

Dependencies scanned continuously.

Our third-party packages are watched around the clock. Dependabot flags known-vulnerable dependencies and opens automated security patches, and every build fails if a critical advisory is present.

Checked on every change.

The codebase is fully typed. Strict type-checking and static analysis run on every change and block any merge that does not pass, so whole classes of mistakes never reach production.

The promise underneath it all

You own your data. You can walk with it.

Kliio is built on one commitment: the record we help you build belongs to you. There is no proprietary format and no lock-in. The security above protects the data. This is what keeps it yours.

One-click export.

Download your entire account as open CSV files, anytime, in a single click. No support ticket, no waiting.

Open and portable.

Standard formats and portable identifiers, so the record moves wherever you do and reads without our software.

Yours to leave with.

If Kliio ever stops being right for you, you take everything with you. We never hold your data hostage.

How we work

We are in early access, and we are candid about that. Security is not a box we ticked once. We harden the product continuously as it grows, and we would rather tell you where we are than oversell.

What is on this page is real today. Encryption, account isolation, and your ownership of the data were built in from the start, not bolted on afterward.

If you have a security question, email security@kliio.com, it goes straight to our engineering team, and you will get a direct, technical answer, not a canned one.