This website uses cookies to ensure you get the best experience
Data Protection
Security is our priority.
We protect your data at every stage. We use certified technologies and comply with all information security requirements: ISO, GDPR, and local standards.
CyberGRX rating, February 2025
CyberVadis rating, December 2024
Certificates
FAQ
The idocs platform stores client data with the cloud hosting provider Kazteleport JSC (cloud elements are distributed across geographically separated data centers: kazteleport.kz/service/iaas), which complies with information security standards and uses VMware vSphere virtualization.
Access to the system and its admin panel is granted only to authorized administrators and restricted by IP addresses. Traffic is controlled at the FortiGate firewall level, and access is available only via VPN for authorized administrators.
Access to the system and its admin panel is granted only to authorized administrators and restricted by IP addresses. Traffic is controlled at the FortiGate firewall level, and access is available only via VPN for authorized administrators.
Customers access their data through a personal account, while employees do not have access to the encrypted database. Internal services are protected by FortiGate firewalls, and remote access is granted only to authorized administrators via VPN.
System login is carried out using an electronic digital signature (EDS) or a personal login and password, with two-factor authentication enabled.
System login is carried out using an electronic digital signature (EDS) or a personal login and password, with two-factor authentication enabled.
In the event of force majeure or data loss due to a system failure, client data is restored from backups by an authorized system administrator. idocs is responsible for the rapid recovery and protection of data in such cases, ensuring service availability in accordance with the SLA.
In the event of force majeure or data loss due to a system failure, client data is restored from backups by an authorized system administrator. idocs is responsible for the rapid recovery and protection of data in such cases, ensuring service availability in accordance with the SLA.
Data on the idocs platform is encrypted both in transit and at rest. Stored data is encrypted with an AES-256 symmetric key kept in a secure vault.
For data transmission, we use HTTPS and SSL with a high level of encryption. All passwords and sensitive information are stored in encrypted form.
The following hashing algorithm is used: PBKDF2 with HMAC-SHA256, 128-bit salt, 256-bit subkey, and 10,000 iterations.
For data transmission, we use HTTPS and SSL with a high level of encryption. All passwords and sensitive information are stored in encrypted form.
The following hashing algorithm is used: PBKDF2 with HMAC-SHA256, 128-bit salt, 256-bit subkey, and 10,000 iterations.
None. Access to client documents is strictly excluded — both at the idocs platform level and under idocs’ Information Security Policies. Only clients themselves can access their data through their personal accounts.
idocs employees, as well as employees of Kazteleport JSC, do not have access to client data. All data in the database is stored in encrypted form, eliminating the possibility of direct reading or copying by unauthorized parties.
idocs employees, as well as employees of Kazteleport JSC, do not have access to client data. All data in the database is stored in encrypted form, eliminating the possibility of direct reading or copying by unauthorized parties.
Any information system can, in theory, be hacked — even those of Google or Microsoft. However, idocs makes every possible effort and allocates significant resources to minimize this risk.
To protect the platform and client data, idocs works with Kazteleport JSC and uses the following services:
To protect the platform and client data, idocs works with Kazteleport JSC and uses the following services:
- Virtual firewall, intrusion prevention system, and dedicated guaranteed internet channel
- Online incident monitoring and traffic inspection through SOC
- Server resource monitoring with Zabbix, full SIEM system Wazuh, and vulnerability scanning with Nessus
- NGFW FortiGate firewalls for network security
Still have questions?
By clicking “Submit request”, you agree to the collection, storage, and processing of your personal data in accordance with the Privacy Policy. You confirm that your other rights and obligations established by the Law of the Republic of Kazakhstan “On Personal Data and Their Protection” are clear and understood.
Our support team is always here to help
© 2025 IDOCS International Ltd
