Skip to the content
kmap
Sign in Get started

Security and data

Your knowledge stays yours.

kmap holds what your company knows, so we treat it that way. Here's where it lives, who can see it, and how you take it with you.

Where your data lives

On Amazon Web Services in London (eu-west-2): the database, the files you upload and the servers that run kmap. Everything is encrypted in transit and at rest, and the database is backed up daily.

We keep the text kmap extracts from your documents, not copies of the files. A citation opens the original where it already lives, in SharePoint, OneDrive or Google Drive.

What our AI providers may do with it

To read documents and write answers, kmap sends the passages it needs to the AI models it uses. Our providers process them only to give us the result. They don't train their models on your data. Each provider is named on the subprocessors page, with where it processes data.

Who can see what

Every connected folder and every upload has a "who can see this": everyone, a department such as Finance or Sales, or a confidential group. Each person's answers draw only on what they're allowed to see. That holds in the app, in their AI tool, in Slack and by email, and it covers names and figures read from a confidential document too.

Your admins invite people, set their roles and manage groups. Sign-in is by email and password, or with Google or Microsoft, and two-step sign-in is available to everyone. Growth adds single sign-on with your directory's groups.

Your IT stays in control

Connecting SharePoint, OneDrive or Google Drive needs your Microsoft or Google admin's consent, and you choose the folders. kmap doesn't read the whole drive. Adding the Slack app follows your Slack admin's rules. Nothing about signing up gets around any of that.

What kmap never does

  • It never monitors inboxes, chats or meetings. In Slack it reads only what someone chooses to share with it.
  • It never writes to your SharePoint or Drive. It reads.
  • Your AI tool asks you before it adds anything to the map on your behalf.

A record of every change

Every fact keeps its history: what changed, who or what changed it, through which channel, when, and why. Nothing is quietly overwritten, and any change can be undone. Admins can see sign-ins, invitations, role changes and exports.

Leaving

An owner can export everything at any time, and can delete the company's data. If you cancel, your company stays readable for 30 days so you can export, and then it's deleted.