KÖLTTÖ
Security
KÖLTTÖ reads cloud accounts so a team can see cost and waste. This page says what that access is, and what it is not.
What KÖLTTÖ can do in your cloud
Read only. KÖLTTÖ does not create, change, or delete cloud resources. AWS and Oracle Cloud access is limited to the read permissions in the connection policy.
Where each company lives
Each company has its own database. One company’s cloud data is not stored with another’s.
How secrets are stored
Cloud credentials are encrypted before they are stored. Portal passwords are hashed, not kept as text. The site is served over HTTPS.
How you sign in
Email and password, with an optional second factor. Corporate single sign-on (SSO) is not available yet.
Who at KÖLTTÖ can open a company
KÖLTTÖ staff can open a company to operate the service. Write actions by staff are recorded. This is support access, not a claim that no one internal can see customer data.
Who else runs the infrastructure
Neon holds the databases, Railway runs the application, Vercel hosts the portal, and Resend sends email. Card payments, when billing is enabled, are handled by Stripe. KÖLTTÖ does not store card numbers.
Report a problem
Email support@koltto.com.
What is not in place yet
KÖLTTÖ does not have SOC 2, and does not offer corporate single sign-on at the moment.