Security
Protect brand media like a brand.
Kayrae runs on enterprise-audited infrastructure. This page outlines how we collect, protect, and respond when something happens with your data.
EU and Türkiye data protection compliance
Enforced encryption on all data in transit
Encryption at rest
Security layers
Four lines of defense.
Encryption
All data is encrypted in transit with TLS 1.3 and at rest with AES-256. Your brand kit — including internal working data — is never kept in plaintext at any layer.
Access control
Production access is under strict role-based control. MFA required. Staff access is granted on a need-to-know basis and re-evaluated quarterly.
Monitoring & audit
24/7 security monitoring; anomaly detection tied to automated alerts. All actions in production systems are written to an immutable audit log — retained for 1 year.
Infrastructure isolation
Customer data is tenant-isolated. Enterprise plans can have a fully isolated private-cloud deployment — including VPC peering.
Data lifecycle
Where your data lives.
Incident response
When something breaks.
Detection
Triage starts the moment an anomaly is raised — automatically by monitoring or by our internal team.
Response
For critical events, the response team is engaged within 15 minutes. Impact analysis and isolation come first.
Notification
Affected customers are notified within 72 hours via email — compliant with GDPR/KVKK.
Post-mortem
Within 2 weeks we publish a public post-mortem per incident — root cause, fix, prevention plan.
Responsible disclosure
Found a vulnerability?
We appreciate researchers who report vulnerabilities responsibly. Our bug bounty is active — up to $500 for critical findings.
Our PGP key: security.kayrae.ai/pgp.asc
Documentation
Need deeper documentation?
We share the VAPT summary, DPA template, and security checklist under NDA. Happy to support your evaluation process.
Upload one flatlay. See what comes back
Three days free. If the first set does not look real, you have lost twenty minutes and we have lost a customer.
Automatic quality corrections use no extra credits
