What Krani can confirm today about how client data is handled, and where to go for the details this page doesn't yet cover.
Client data is encrypted and hosted out of Malaysia, and is not shared with third parties. Transactions Krani isn't confident about are flagged with a confidence score for an accountant to review before anything is posted.
The sections below cover the specifics firms usually ask about for their own due diligence.
Client data is hosted on Amazon Web Services (AWS) infrastructure in the AWS Malaysia region.
Data is retained for 7 years, in line with LHDN's record-keeping guidelines. If an account becomes inactive, its data is deleted after 1 year of inactivity.
Yes. A DPA is available on request — email sales@krani.ai and we'll send one over.
CSV VENTURES SDN. BHD., the company behind Krani, processes personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Client data uploaded to Krani, including data extracted from receipts, invoices and bank statements, is encrypted, hosted on AWS infrastructure in Malaysia, and never shared with third parties. Data is retained for 7 years in line with LHDN's record-keeping guidelines and deleted after 1 year of account inactivity. Firms that need a Data Processing Agreement as part of their own PDPA obligations can request one from sales@krani.ai.
If your firm needs specific answers for a client's due diligence, engagement letter or panel review, WhatsApp us directly and we'll get you what you need.
Send us a message and we'll answer it directly.
WhatsApp Us for a Demo Free demo. No commitment.