Trust, with receipts.
Where your data lives, who can read it, and the documents your review needs. Ask for anything that isn't here.
Tenant isolation
Every tenant-scoped route resolves the organization from the session before it reads, and a foreign id answers 404 rather than confirming what exists.
Who can read your messages
People with access to the channel. K Buddy sees exactly what the person asking can see, and no more.
Retention & deletion
You set retention per space. Legal hold overrides it for named people and channels. Deleted means deleted from search, too.
Sign-in & identity
Passkeys, two-step sign-in, SSO and SCIM, with workspace sign-in rules.
Sub-processors
Kemble uses a small number of third parties, each only for the feature it serves: Cloudflare, the network kemble.io is served through; Backblaze for file storage; Baseten, with LLM Gateway as a fallback, for K Buddy and Kemble’s other AI features; Klipy for GIF search, which your browser contacts directly; Google for signing in with Google or a phone number, for push notifications, and for YouTube videos in Watch together; and Paddle, PayTabs or PayPal for payments, once switched on. What each one receives, and when, is on the Subprocessor list.
Privacy policy
Plain-language summary first, the full policy after. Read it on the Privacy policy page.
Documents
Request access and we'll share under NDA.
- Security overviewDownload
- Subprocessor listDownload
- Data processing addendumRequest
- Penetration test summaryRequest
- Uptime historyView