Care records are about vulnerable people, so we treat them with more care than anything else we do. Your data is encrypted on the way to us, backed up every night in encrypted form, and stored on secure servers in London. And if you ever leave, you take every record with you.
30 days free, nothing charged until day 31
Everything your team writes is encrypted on the way to us, and we take an encrypted backup of it every night. Only your own users can see your records in Kiwi, and every login is protected against guessing and brute force. Our own support staff see your records only when you ask for help or when we need to fix a fault or a security issue.
Your records are hosted on UK servers in London, in a data centre behind a firewall. Backups are kept in the UK too. Kiwi is run by ASIZA, which is based in the United Arab Emirates. Our named staff look after the service remotely from there, over encrypted connections, using individual keys and two-factor sign-in to our hosting account, and every administrative login is logged. They do not keep copies of your records outside the UK. UK law treats this remote access as an international transfer, so it is covered by the UK International Data Transfer Agreement in our contract with you.
A full, encrypted copy of your data is taken every night and kept in the UK, and we have tested restoring it, so that a fault, a mistake or a lost device does not cost you your records.
Each organisation has its own separate database. Nobody else's data is in it, and nobody else can see yours. Download your records as spreadsheets and PDFs whenever you like, and ask us at any time for a complete copy of your database.
Cyber Essentials is the UK government-backed scheme that helps organisations protect themselves against the most common cyber attacks. It checks five things: firewalls, secure configuration, who has access to what, protection from malware, and keeping software up to date.
We are certified by Cyber Garrison, a certification body working with IASME. Certificate number cbad3cac-e233-4b8a-a4cd-2897edde8bd3.
Verify this certificate →or search IASME's certificate register
If you think you have found a security issue in Kiwi or on this website, please email security@kiwiapp.co with as much detail as you can: what you found, where, and how to reproduce it.
Please do not access, change or delete data that is not yours, do not disrupt the service, and give us reasonable time to fix the problem before telling anyone else. Our security contact is also published in security.txt.
Every person gets their own login and only the parts of the record their role needs. Agency staff can be given access to today only. A permanent audit log shows who signed in, opened, downloaded or changed what, and it is kept for eight years.
Care records such as daily logs, incidents and care plan sections are never silently overwritten. Every change to them keeps the earlier version, with who changed it and when, and a mistake is voided with a reason, never deleted, so the story of a resident's care stays complete. When you leave, we hand your records back on request and then delete our copy.
When we improve Kiwi, your records are never rewritten or moved. Every release is rehearsed on a copy first.
A daily password that expires at midnight, so nobody can sign in from home when they are not working.
Every photo and document is checked for safety before it is stored, and phone photos have their location data removed.
Ask, and you receive your whole database, readable spreadsheets, every stored photo and document, and a PDF care record for each resident. Then we delete our live copy, confirm it in writing, and our encrypted backups expire within 12 months.
It is hosted on UK servers in London, with backups in the UK. Our team is based in the United Arab Emirates and supports the service remotely, under the UK International Data Transfer Agreement in our contract with you. No copies of your records are kept outside the UK.
Your data is encrypted while it travels between your devices and our servers, and we take an encrypted backup of it every night.
Nothing is lost. Your data is on our servers, not on the device, so it is there the moment you are back online.
Of course. We will walk them through it on a call.
Yes. Your team can download records as spreadsheets and PDFs at any time, and when you leave we send you the complete handover bundle on request. Monthly plans have no notice period.
Yes. It is part of our terms and you accept it when you sign up. Read the summary at kiwiapp.co/data-processing, and email privacy@kiwiapp.co for the full agreement. We can also send you our transfer risk assessment and a ready-made data protection impact assessment for your home.
A live walkthrough with our team. Your homes, your scenarios, your questions. Or start straight away. 30 days free. Card taken at sign-up, nothing charged until day 31; cancel before then and you pay nothing. Then billed automatically, cancel any time.
Or email sales@kiwiapp.co