Data Residency & Encryption
Employee data stays in Indonesia by default, encrypted under a key that is yours alone
Claro is a managed service hosted in Jakarta, Indonesia. Every tenant holds its own AES-256-GCM data encryption key, every table carries row-level isolation, and whole-tenant erasure gives you a clean answer to an erasure request, with no infrastructure for your team to run or patch.
Hosting in Indonesia, per-tenant encryption, and row-level isolation are enforced on every request, with nothing for your team to install, upgrade, or patch.
For banks, insurers, and government agencies, where employee data is held is often as important as what a platform does with it. Claro runs as a managed service in Jakarta, Indonesia, so personal data stays inside the geography your regulators and your own policy expect it to, unless you turn on an optional external provider, such as AI-generated emails or SMS and voice simulation. Every table carries row-level tenant isolation, resolved on every authenticated request, so one organization's records are never in the same query path as another's. Personally identifiable fields such as email addresses are encrypted at rest with AES-256-GCM under a data encryption key that belongs to your tenant and no other, with blind indexes so an encrypted field like email can still be searched without ever decrypting the column.
Data subject requests are handled two ways, matched to the scope of the request. Whole-tenant erasure permanently deletes every record and file the tenant holds, then destroys its encryption key. Database backups taken before then still hold that data until they expire, within 7 days. Field-level user erasure anonymizes a single user's PII, replacing their email with an encrypted sentinel and nulling other personal fields while leaving a tombstone timestamp, for individual erasure requests. A configurable data retention policy enforces how long data is kept per tenant, run by a scheduled background job rather than a manual cleanup task. Because Claro is managed, security patches and platform fixes reach you continuously, with no upgrade project to budget for and no maintenance window your team has to plan.
What you get
Hosted in Jakarta, Indonesia
Claro runs as a managed service in Jakarta, Indonesia, so employee data stays inside the geography your regulators and internal policy expect by default, without your team standing up any infrastructure.
A separate AES-256-GCM key per tenant
Personally identifiable fields are encrypted at rest under a data encryption key unique to your tenant, and the platform refuses to start unless its encryption keys are configured.
Row-level tenant isolation
Every record carries a tenant identifier and every authenticated request is scoped to it, so no query can reach across organizations, however it is constructed.
Blind indexes for searchable encrypted fields
Fields like email are encrypted at rest but remain searchable through a blind index, so lookups never require decrypting the whole column.
Permanent whole-tenant erasure
Offboarding a tenant permanently deletes every record and file it holds, then destroys its data encryption key, satisfying whole-tenant erasure obligations.
Field-level user erasure
Individual erasure requests anonymize a single user's PII, an encrypted sentinel for email and null for other personal fields, with a tombstone timestamp marking when the erasure occurred.
Configurable retention, enforced automatically
A per-tenant retention policy is enforced by a scheduled background job, rather than a manual process someone has to remember to run.
Built for Indonesia
Data residency without an infrastructure project
Many Indonesian banks and government agencies are required, or strongly prefer, to keep employee data inside Indonesia. Claro answers that with hosting in Jakarta plus cryptographic separation: your tenant's data sits behind its own AES-256-GCM key, isolated at row level on every request, and can be permanently deleted on request, with that key destroyed last. You get the control a self-managed stack was meant to buy you, without your team owning the patching, the backups, or the upgrade path.
- Managed hosting in Jakarta, Indonesia, so employee data stays in Indonesia by default
- A separate AES-256-GCM data encryption key per tenant, plus row-level isolation on every request
- Whole-tenant erasure and field-level user erasure satisfy UU PDP (Indonesia's data protection law) data-subject rights
- Configurable, per-tenant data retention enforced automatically
- Security fixes ship continuously, with no upgrade project or maintenance window on your side
Frequently asked questions
Claro is a managed service hosted in Jakarta, Indonesia, so employee data stays in Indonesia by default rather than being processed in a distant cloud. Our team can confirm the specific region and the contractual residency commitment before you sign. Data leaves Indonesia only if you turn on an optional external provider, such as AI-generated emails or SMS and voice simulation.
PII fields such as email addresses are encrypted at rest with AES-256-GCM under a data encryption key unique to your tenant, and the platform will not start unless its encryption keys are configured.
Two layers. Every table carries a tenant identifier and every authenticated request is scoped to it, so a query cannot cross organizations. On top of that, each tenant's PII is encrypted under its own key, so the separation holds cryptographically as well as at the query layer.
For an individual request, field-level user erasure anonymizes that user's PII with a tombstone timestamp. For a whole-tenant erasure, every record and file the tenant holds is permanently deleted from the live service, then its data encryption key is destroyed. Backups taken before then expire within 7 days.
No. Claro is fully managed. Platform updates, security patches, and infrastructure maintenance are handled by our team and ship continuously, so there is no upgrade project, no maintenance window to schedule, and no chance of running a version that has fallen behind.
Related pages
Risk Scoring & Analytics
A behavior-driven human risk score built from clicks, reports, and training activity, with department views, benchmarking, and board-ready exports.
Learn morePhishing Reporting
A one-click Outlook and Gmail report button that matches reported emails to simulations, rewards reporters, and routes real threats to your admins.
Learn moreVishing Simulation
Branching voice-call simulations with typed script nodes, DTMF-driven flows, and outcome capture that feeds directly into risk scoring and training.
Learn moreSee it running on your own domain
Book a walkthrough with our team and we'll show you this capability configured for your organization's compliance requirements and language needs.
Book a walkthrough