Legal

Trust

last updated 2026-07-12 · operated from Flanders, Belgium

This page is a plain-language summary of how we run and protect konnos. It is meant to be honest and specific: where your data lives, how it is encrypted, how it is backed up, who can reach it, and what we do if something goes wrong.

Where your data lives

konnos runs on Hostinger VPS infrastructure in the EU (Frankfurt / France region). Your account and repository metadata live in a Briven (DoltGres) database. Your repositories themselves are stored as bare Git repositories on disk — they are just files, so your code survives even if the surrounding database fails. Each project is isolated from the others.

Encryption

Traffic to konnos is protected with TLS 1.3, using certificates from Let's Encrypt that renew automatically. Secrets at rest are encrypted with AES-256-GCM. Session cookies are HTTP-only, with SameSite=Lax and the Secure flag set. API keys are stored as SHA-256 hashes, and only the last 4 characters are ever shown back to you.

Backups

The database is backed up nightly to off-box storage using dolt_backup, with a 30-day retention window. Repositories are backed up separately. Restores are tested periodically to verify that backups are valid and recoverable. Point-in-time recovery is planned for a later phase.

Access

Server access is SSH key-only — root password login is disabled. Every mutation on the platform is written to an append-only audit log, tied to the actor who made it. IP addresses in those logs are hashed, never stored in plaintext.

Monitoring

konnos's own health is watched with flndrn's own tools: Katsuro for logs, errors, and health, and Web Down for uptime. The contents of your repositories are never sent to these tools.

Incident disclosure

If a security incident affects your account, we will notify you within 72 hours and publish a post-mortem within 30 days. We have had no incidents to date.

Open source

konnos is open source. The Git engine is licensed under AGPL-3.0; the CLI and SDKs are MIT. You can read, audit, and self-host the code from code.konnos.org/konnos/konnos.

Questions

For any questions about this document or to make a request, please reach us through our contact form. We do not publish a direct email address.