Sensitive credentials
Broker tokens are encrypted server-side. Passwords, MPINs and TOTP secrets are not collected.
Data minimisation and strict account isolation.
KAVIX is designed to process only what is needed for the service and to keep broker secrets out of customer-facing surfaces.
Isolation
Every account read and mutation must enforce user and tenant ownership.
Retention and access
Operational and audit data follow documented retention and access controls.