Alterok Inc. - Security Trust Center

Alterok Inc. - Security Trust Center

Security at kenno

kenno is the planning workspace where software teams and their coding agents decide what to build. It's built and run by Alterok, Inc., a Delaware corporation.

Your plans, comments and code are the most sensitive things you trust us with, so we keep the system small and the access narrow:

Read-only on your code. kenno reads pull requests, checks and code through a GitHub App, only on the repositories you choose. It never writes to your repositories or merges anything.
No passwords. You sign in with GitHub, Google or a one-time email code. Workspace owners decide who has access and can remove anyone at any time.
Encrypted in transit and at rest. TLS 1.2+ with HSTS everywhere; data and backups encrypted at rest by our infrastructure providers; third-party tokens encrypted with AES-256-GCM.
No training on your data. We don't train AI models on your plans, comments or code, and neither do the providers we use.
Hosted in the United States, with daily backups.

We're working toward SOC 2 Type I and Type II. Security questions or a report: security@kenno.ai.

35

Controls

Safeguards continuously monitored across our infrastructure and processes.

Acceptable Use

Access Rights

Asset Inventory

Change management

Configuration & Patch Management

Credential Management

Data Privacy

Data Retention & Destruction

12

Subprocessors

Third parties that process data on our behalf under strict contractual safeguards.

Cloudflare

Web infrastructure and security provider for DNS, CDN, and edge computing.

Convex

Backend-as-a-service platform providing database and serverless functions.

GitHub

Platform for version control, collaboration, and identity management.

Google Workspace

Suite of productivity and collaboration tools, used for identity and email.

Liveblocks

Real-time collaborative infrastructure for building interactive experiences.

7

FAQ

Quick answers to common security and compliance questions.

Resources

Policies, whitepapers, and contacts for deeper information.

Privacy policy

Terms of service