# Security & Trust

How Mihu approaches security, privacy and responsible customer-conversation workflows.

GDPR Privacy program

KVKK Privacy program

256-bit Шифрование

Support Security questions

## Функции безопасности

We employ multiple layers of security to ensure your data is always protected.

### Контроль доступа

Описание функции - заполнитель

### Безопасная инфраструктура

Описание функции - заполнитель

### Аудиты безопасности

Описание функции - заполнитель

### Ответ

Описание функции - заполнитель

### Резервное копирование данных

Описание функции - заполнитель

## Privacy & regulatory requirements

Your organization remains responsible for assessing the legal and contractual requirements that apply to its use of Mihu.

GDPR

#### GDPR

Review our Privacy Policy and contact us to discuss data-processing requirements for your organization.

KVKK

#### KVKK

Organizations operating in Türkiye should assess their own KVKK obligations and implementation requirements.

HIPAA

#### HIPAA

Healthcare customers should contact Mihu before processing protected health information to assess their specific requirements.

## Data Protection

We take a comprehensive approach to protecting your data throughout its lifecycle:

### Data Collection

We only collect data necessary to provide our services

Clear consent mechanisms for data collection

Transparent privacy policies and data practices

### Data Storage

All data encrypted at rest using AES-256

Secure, redundant storage across multiple data centers

Regular integrity checks and validation

Configurable data retention policies

### Data Access

Role-based access control (RBAC)

Multi-factor authentication (MFA)

Session management and automatic timeouts

Comprehensive audit logging

### Data Deletion

Right to erasure (GDPR & KVKK compliance)

Secure data deletion procedures

Automated purging based on retention policies

Verification of complete data removal

## Безопасность

Enterprise-grade firewalls with intrusion detection and prevention

Automatic mitigation of distributed denial-of-service attacks

Web Application Firewall to protect against common vulnerabilities

Операции

Isolated environments for different services and data types

## Безопасность

Security-first development practices and code reviews

Automated scanning for known vulnerabilities

Regular third-party security assessments

Responsible disclosure program for security researchers

Continuous monitoring of third-party components

## Business Continuity

99.99% uptime SLA with redundant systems

Comprehensive DR plan with regular testing

Data replicated across multiple regions

Automated backups with point-in-time recovery

## Security Reporting

If you discover a security vulnerability, please report it responsibly:

security@mihu.ai

Do not publicly disclose the vulnerability until we've addressed it

Provide detailed information to help us reproduce and fix the issue

We commit to acknowledging reports within 24 hours

## Have Security Questions?

Our security team is here to help. Contact us for more information about our security practices.

Contact Security Team (https://mihu.ai/ru/contact) View Privacy Policy (https://mihu.ai/ru/privacy)