What Krani can confirm today about how client data is handled, and where to go for the details this page doesn't yet cover.
Client data is encrypted, hosted in Malaysia and never sold. It is shared only with the providers that run Krani and the software you connect. Transactions Krani isn't confident about are flagged with a confidence score for an accountant to review before anything is posted.
The sections below cover the specifics firms usually ask about for their own due diligence.
Client data is hosted on Amazon Web Services (AWS) infrastructure in the AWS Malaysia region.
Documents and extracted data are kept for the life of your subscription and for up to 7 years afterwards, so you can retrieve accounting records for the statutory record-keeping periods under the Income Tax Act 1967 and Companies Act 2016. You can ask us to delete your data earlier at any time. A verified request is carried out within 30 days and purged from backups within a further 90 days, unless the law requires us to keep specific records.
Your firm owns the data it uploads. At any time, including if you decide to stop using Krani, you can export the extracted data as Excel files and download the original receipts, invoices and bank statements as ZIP archives for your own records.
Account owners can create sub-accounts for staff and limit each person to the clients they're assigned to, so staff only see the client files they work on.
Documents and data you upload to Krani are not used to train public AI models.
Yes. Our data-processing terms are set out in section 7 of our Terms of Service. If your firm needs a separate Data Processing Agreement for its own PDPA obligations, email it@krani.ai and we'll send one over.
CSV VENTURES SDN. BHD., the company behind Krani, processes personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Client data uploaded to Krani, including data extracted from receipts, invoices and bank statements, is encrypted, hosted on AWS infrastructure in Malaysia, and never sold. It is shared only with the service providers and connected software described in our Privacy Policy. Data is kept for the life of the subscription and for up to 7 years afterwards to cover statutory record-keeping periods, and can be deleted earlier on request. Firms that need a Data Processing Agreement as part of their own PDPA obligations can request one from it@krani.ai.
If your firm needs specific answers for a client's due diligence, engagement letter or panel review, WhatsApp us directly and we'll get you what you need.
Send us a message and we'll answer it directly.
WhatsApp Us for a Demo Free demo. No commitment.