Security & Data Handling

Our approach

We design for security by default.

Kadlo works with sensitive systems, data, and code. We take a pragmatic, risk-based approach to security that prioritizes:

• •least-privilege access
• •scoped engagement
• •auditability
• •and clear ownership

We do not operate as a marketplace. All work is routed, scoped, and executed within Kadlo-managed workflows.

Data access & handling

Access is limited and purpose-bound.

• •Access is granted only for the duration and scope of an engagement
• •We work against agreed inputs (repos, datasets, environments)
• •Credentials and access are revoked at the end of delivery
• •No customer data is reused across engagements

Where required, we support:

• •anonymized datasets
• •synthetic data
• •environment-specific access controls

Expert controls

Experts operate under controls, not independently.

• •All experts are vetted and calibrated
• •Work is routed — not open-bid or freelance
• •QA and review gates are enforced
• •Outputs are logged and auditable (PRs, reports, datasets)

This allows teams to engage expert humans without losing control.

Compliance posture

Compliance status

Kadlo is an early-stage company and does not currently hold formal certifications such as SOC 2 or ISO 27001.

However:

• •We regularly support customers with internal security reviews
• •We are happy to complete vendor security questionnaires
• •We align our practices with common SOC 2 principles where applicable

Formal certification is planned as customer requirements justify it.