Isolation by architecture, not by promise.
A brand hands Kirti its voice, its ad-account tokens, its audience data, and its competitor map. The protection for all of it is built into where the data lives — not bolted on as a settings-page assurance. This page describes how.
Encryption in transit and at rest
All traffic to Kirti is served over TLS. At rest, each brand's sensitive configuration — voice memory, integration tokens, audience and competitor data, model-provider preferences — is stored in an encrypted per-customer config row, decrypted with the customer's own key derivation only at request time. Credentials are never written to logs.
Per-customer isolation
One agent serves exactly one brand. There is no shared, pooled model that customer data drifts into and no cross-customer index. Isolation is enforced by the encrypted-config substrate and per-customer scoping at the data layer, so one brand cannot read another's rows even in the event of an application bug — the boundary is architectural, not a permission check.
Your data is never the product
Inference runs under contractual zero-retention terms. Your data is never sold, never resold, and never used to train models — ours or a provider's. Every action the agent takes is written to an immutable, hash-chained audit log you can read and export.
Data residency
Kirti is built and operated by Ekarche Private Limited in Mathura, Uttar Pradesh, India. Production data is hosted in managed cloud infrastructure under that operator; data-residency specifics for an enterprise engagement are confirmed in writing before onboarding.
Reporting a vulnerability
Email hello@ekarche.com with the details and steps to reproduce; we will acknowledge your report and keep you updated through remediation. The machine-readable policy is published at /.well-known/security.txt per RFC 9116. Please give us a reasonable window to fix an issue before any public disclosure.
Kirti is built and operated by Ekarche Private Limited (CIN U58200UW2026PTC253262), Mathura, Uttar Pradesh, India.