Security & your data

Every business's data in Kudi is strictly separated. Records are isolated at the database level so that one business can never see another's invoices, expenses, ledgers or reports. This separation is enforced by the database itself, not only by the application.

Within your business, what each person can see and do is governed by their role. Signing in is handled by a secure, dedicated identity service, and every request is checked against the business and role it belongs to.

Connections to Kudi are encrypted in transit (HTTPS). Your data is stored on managed, access-controlled infrastructure and encrypted at rest by the platform. We apply the principle of least privilege to who and what can reach your records.

Kudi is operated by Nexus Innov8 Africa from Accra, Ghana, on reputable managed cloud infrastructure. How we collect and use your information is set out in our Privacy Policy.

If you believe you have found a security issue, please tell us right away via Contact & Support. We investigate reports promptly.