Skip to main content

🔒 KryptoGO Safety

tip

All KryptoGO products are built with top-tier security measures, ensuring the highest level of protection while fully respecting and safeguarding our users' privacy.

Asset Security and Privacy​

  • KryptoGO stores encryption keys used for encryption and decryption in Google Cloud's KMS (Key Management Service), the highest standard in the industry. The security control measures include isolation at the microservice level, strict cloud service account permission allocation and management, and comprehensive audit log retention.
  • The private keys of KryptoGO App users are protected through Shamir's Secret Sharing (SSS) and encryption, ensuring that a private key cannot be lost due to a single node or device being compromised or lost. Biometric authentication is also introduced to ensure that each transaction is signed by the owner.
  • For sensitive information including but not limited to user photos and ID documents, KryptoGO encrypts the data using symmetric key encryption before storing it in the database, ensuring that even under attack, hackers cannot access the information.

For more details regarding the safety and privacy of our wallet app, see the section on Wallet Safety. For more details regarding the safety and privacy of KryptoGO Studio, see the section on Studio Asset Safety.

International Security Certifications​

KryptoGO complies with these security standards and renews its certifications annually to ensure ongoing compliance and protection.

  • ISO 27001: A framework for information security management, helping organizations manage and protect their information assets, ensuring security.
  • ISO 27701: Establishes trust for personal information management, provides transparency among stakeholders, and clearly defines roles and responsibilities.

KryptoGO products have also undergone comprehensive penetration testing conducted by the international security team Cure53. Comprehensive security audits and vulnerability scans are performed on the wallet application and backend to ensure asset security and the reliability of our infrastructure.