Security

Security Practices

Kokoro is built with layered defenses to protect estates, residents, and event operations while delivering the responsive access controls you need.

Data Encryption

All data traveling between devices and our servers uses TLS encryption. At rest, data stored in Firebase, backup storage, and analytics services is encrypted using industry-standard algorithms so guard logs, QR codes, and resident profiles stay safe.

Infrastructure Hardening

We rely on hardened cloud infrastructure, continuous vulnerability scanning, and automated patching to keep dependencies current. Access to production systems is limited to authorised EntryKode personnel and requires multi-factor authentication.

Operational Monitoring

System metrics, ANPR events, guard console actions, and API calls are logged for anomaly detection so we can quickly respond to suspicious activity. Our incident response process includes alerting affected customers within 72 hours whenever required.

Access Controls

Role-based permissions keep dashboards scoped to guards, resident admins, or event organizers. Employees and vendors only receive the minimum privileges they need, and every action is traceable through audit-ready logs.

Third-Party Oversight

External vendors (analytics, OCR, payment processors) are vetted for compliance and must follow our security standards. We regularly review contracts, monitor integrations, and revoke access the moment a vendor relationship ends.