Security & your clients’ data
You hold passports, addresses and visa histories. Here is how Kamnod looks after them.
Hosted in Thailand
Your agency's records and files are stored and processed in Thailand, in Amazon Web Services' Asia Pacific (Thailand) region, under Thailand's Personal Data Protection Act (PDPA). Passport details and copies don't leave the country to be stored.
Passkeys for your clients
Clients sign in with a passkey on their own phone, unlocked by their fingerprint, face or screen lock. There is no password to guess, reuse or phish, and the biometric never leaves their phone.
Nothing changes without your team
Whatever a client sends arrives as a submission for review. It only reaches their record when someone on your team approves it, and the review is kept.
Staff sign-in and rights
Each staff member signs in with their own account, and sees only the agency databases they've been given. Remove someone and their access ends.
Every agency on its own
Each agency's data is in its own database, reached with its own login over an encrypted, certificate-checked connection. One agency can never see another's clients.
Run for you
Updates, backups and security fixes are handled by the team that builds it. There's no server for you to look after.
Passport copies and other files
Every scan and photo your team or your clients add, and what happens to it.
Files encrypted and private
Passport copies, permits and every other file are kept in private storage (Amazon S3) in Thailand, encrypted while stored and apart from every other agency's. A file's link only works after signing in to your agency, and the download address it gives lasts five minutes.
Photos cleaned before they're kept
When a photo is added, Kamnod removes the hidden details a phone camera records, such as where it was taken (GPS), the time and the phone's model, and keeps it at a size that still prints clearly.
30 days to undo a deletion
A deleted file is kept out of sight for 30 days, in case it was deleted by mistake, and can be brought back on request. After that it is gone for good.
Questions about data protection?
Ask us anything before you sign up, or read the Privacy Policy.