All communication between your browser and our servers is encrypted over HTTPS. Our servers are hosted on Amazon's battle tested AWS infrastructure. If you are uncomfortable with your data being hosted on our servers, we have an enterprise version of Kumu that you can install on your company's own server. Learn more at https://kumu.io/enterprise.
Each project's data is stored in a separate CouchDB database for additional privacy. All projects are backed up daily and the backups are retained for a minimum of 30 days. We have a strict employee access and confidentiality policy that prevents Kumu employees from accessing your projects without prior consent.
All payments are securely handled with full PCI-compliance through Stripe, the industry standard. We do not store any sensitive billing information on our own servers.
If you have any further concerns regarding security, please email us at support@kumu.io and we'll be happy to answer them!