Security

What this page is

This page describes the controls AKLI actually states in its privacy policy and terms. It is not a compliance certificate. AKLI has not published an ISO 27001 or SOC 2 report here, and the terms do not promise uninterrupted uptime. No method of transmission or storage is 100% secure. For who builds AKLI, see the company page.

Encryption

Data is encrypted in transit with TLS 1.2/1.3 and at rest with AES-256. Those controls are applied by the database and hosting infrastructure, not by a setting a kitchen has to turn on. Where data moves across borders, the privacy policy says AKLI takes steps appropriate to applicable law. This page does not claim that data stays inside one country.

Access control

Access to a workspace is limited to people on that account. You are responsible for who those people are and for keeping credentials confidential, which is also what the terms say. AKLI does not advertise single sign-on or automated user provisioning on this site. If you need a specific identity setup, ask during a demo rather than assuming it.

Audit trail

Changes are logged: who did what, and when. That trail covers operational edits so a group can see that a recipe, a count, or a HACCP entry was changed. It is an audit log of product activity, not a substitute for your own CCTV or a financial audit.

Export, deletion, and ownership

You retain ownership of customer data you upload. AKLI has a limited license to process it to provide and improve the service, and does not sell it. Inventory, recipes, procurement, HACCP logs, and analytics can be exported as CSV or Excel, including if you cancel.

Personal data is deleted or anonymized within 90 days of account closure, subject to legal retention requirements and backup cycles. To ask for access, correction, or deletion, email privacy@akli.io. The full text is the privacy policy and the terms.

AI

Customer data is not used to train public AI models. AKLI AI answers from your workspace. Outputs can be wrong. Review them before you act on them. That limit is in the privacy policy and the terms, not only in marketing copy.

HACCP records

Digital HACCP logs are timestamped and exportable. They are built for the logging expectations of Qatar Ministry of Public Health (MOPH), the UAE Food Safety Department, and the Saudi Food and Drug Authority (SFDA). Exporting a log does not make a site compliant. The kitchen still runs the program. Read digital HACCP for restaurant groups.