Security

Built to be trusted with a business.

Sellers run their catalog, orders and money on Atasuai. Protecting that data is foundational, not a feature — here's how we approach it.

Encryption

Data is encrypted in transit (TLS) and at rest. Sensitive fields are isolated and access-controlled.

Secure infrastructure

Hosted on hardened cloud infrastructure with network isolation, backups, and continuous monitoring.

Access control

Role-scoped access across companies, stores and warehouses, so each teammate sees only what they should.

Payments

Payments are handled through established providers; we minimise the sensitive payment data we ever touch.

Reliability

Regular backups and recovery practices keep your catalog, orders and ledger safe and available.

Data ownership

Your business data is yours. Export it when you need it; we don't sell it or hand it to anyone else.

How we work

Least-privilege access for our own team, reviewed regularly.
Security considered through the whole development lifecycle.
Monitoring and logging to detect and respond to issues.
Privacy practices aligned with Kazakhstan's data-protection law.

Formal certifications and audit details will be published here as they're completed.

Report a vulnerability

Found something? We want to hear from you. Email our security team with the details and we'll respond quickly. We don't pursue good-faith researchers who follow responsible disclosure.