Frequently asked questions

Production access is restricted to a small number of named Kendis engineers who need it to operate and support the service. Each person has an individual account; shared or generic credentials are not permitted. Access is granted on a least-privilege basis, reviewed periodically, and removed promptly when a role changes or someone leaves. All administrative access to production is logged, and multi-factor authentication is required for the hosting consoles and for any path into production. Access is further restricted by location: all personnel with production access are based in Finland, and for the Germany region this restriction to EEA, UK or Swiss locations is enforced by system configuration rather than by policy alone. Kendis personnel do not routinely access customer data; where support work requires it, access is limited to what the task needs and is logged. These controls form part of the Kendis ISO/IEC 27001 information security management system.

No. Kendis does not use customer data to train any AI or machine-learning model. The optional Kendis AI assistant (Charlie) is available on Org View subscriptions only, is governed by the separate Kendis AI Terms of Use, and can be left switched off. Kendis Premium Cloud does not include AI features. Where AI features are enabled, prompts and responses are processed by the model provider under terms that prohibit training on customer inputs.

Kendis offers two Hosting Regions. The United States region runs on Amazon Web Services in Northern Virginia with backups held in the United States. The Germany region runs on OVHcloud in Frankfurt with backups held in Frankfurt. You select the region when you subscribe; it applies to your account for its lifetime and cannot be changed afterwards. Your data is stored and processed only in the region you select. Account data (names, contact details, billing, support correspondence) is handled in Kendis's business systems, which may sit outside the EEA; the providers involved are listed in Section 5 of the Hosting and Subprocessor Schedule.