GDPR Compliance

1. Commitment to GDPR

At Kyrazo, we are committed to ensuring the security and protection of the personal information that we process. Our dedicated infrastructure is built with "privacy by design": physically isolated compute, databases, and delivery workers per customer, with data protection principles integrated into our event-driven architecture.

2. Data subject Rights

We facilitate your rights under the GDPR, including:

• Right of Access: Request a copy of your personal data processed by us.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (subject to retention policies).
• Right to Portability: Receive your data in a machine-readable format.

3. Technical & Organizational Measures

Our dedicated environments implement rigorous security standards to protect your data:

• Encryption at Rest: Sensitive payloads (Headers & Bodies) are encrypted using AES-256-GCM.
• Encryption in Transit: All API traffic is secured via TLS 1.3 or higher.
• Physical Isolation: Dedicated virtual machines, databases, and delivery workers per customer. Zero shared database memory.
• Access Control: Credentials are issued to authorized users after contract provisioning, with role-based access control.

4. Sub-processors

We utilize carefully selected sub-processors to maintain dedicated infrastructure and operate the website:

5. Contact Our Data Protection Team

For any GDPR-related inquiries or to exercise your rights, please contact our team at: