Encryption Overview
How Okuru Protects Yours and Your Customer Data with Encryption
At Okuru, keeping yours and your customers’ information safe is non-negotiable. To protect every gift card transaction and customer profile entrusted to us, we use strong, modern encryption across our platform.
What does “encryption” mean?
Encryption is the process of converting readable information into unreadable code that only authorised systems can unlock.
If someone were to access our database or backups without permission, all they would see is scrambled data, not names, emails, phone numbers, bank account or gift card details.
Our encryption standard
We use:
AES-256: A widely trusted, industry-standard encryption algorithm used globally by banks, governments, and leading technology companies.
In simple terms:
Even if encrypted data is stolen, it remains useless without the correct encryption keys.
What we encrypt
Within the Okuru platform, we encrypt sensitive data at the application level before it is stored, including (where applicable):
Customer contact details
Recipient contact details
Gift card URLs
Sensitive partner contact information
API keys
Non-sensitive operational fields (timestamps, country, currency, general status codes) may remain unencrypted so we can provide reporting, fraud monitoring, and support.
How we protect encryption keys
Encryption is only as strong as the protection of the keys.
At Okuru:
Encryption keys are stored securely outside the database.
Keys are never hard-coded into the app, never stored in source control, and are only accessible to authorised systems.
Access to keys is tightly controlled and monitored.
We follow a defined process for key updates and rotations.
Why this matters for you
By using strong encryption:
Yours and your customers’ information is better protected against data breaches.
Stolen database records cannot be read in plain text.
You can confidently tell your customers that the gift card platform you’ve partnered with is designed with security in mind.
