Security
Data protection
We treat security as a priority. Data is protected at every step of working with the system: we use certified technologies and meet ISO, GDPR and local Kazakhstan information security standards.
ISO
GDPR
CyberGRX
CyberVadis
External assessments
Independent agency assessment results
idocs’ information security level is regularly reviewed by independent international agencies.
Independent audit
Information security audit results
Independent auditors review the system across several areas every year.
Security functions protocol PDF Security processes protocol PDF Network assessment protocol PDF Load testing protocol PDF Source code analysis protocol PDF
Download PDF: Security functions protocol · Security processes protocol · Network assessment protocol · Load testing protocol · Source code analysis protocol
Frequently asked questions
Where do we store client data?
Details about infrastructure hosting are available from the support team: email sales@idocs.kz.
Who has access to the data?
Access is split by roles and permissions inside the company’s own account. A manager can explain the details.
Do we keep a backup of the data?
Yes, backups are part of the system’s standard operating process.
How is client data restored in a force-majeure event?
The recovery procedure is described in internal security protocols. Details are provided on request.
How is data encrypted?
Data is transmitted and stored using certified encryption technologies.
What document data do we see, and what don’t we see?
Access to document content is limited by permissions that the client company itself configures.
Can our cloud storage be hacked?
The system regularly undergoes independent resilience testing. See the assessment results section above.