Security & privacy

Your data stays yours.

Nextadop works like a transparent layer on top of your software. The guidance is ours; your data, your users and your business stay yours.

  • TLS 1.3
  • AES-256
  • Single sign-on
  • KVKK & GDPR
Your users’ browser
Your application
CustomerNorthwind Ltd.
IBANTR•• •••• •••• 4412
Password••••••••••
Stays in the browser
Nextadop cloud
AES-256 at rest
Guide events only
Illustration of the zero-knowledge model
Built in, not bolted on

Six layers between your data and the outside world.

01

Encrypted in transit

Every request between the browser, the builder and our servers travels over TLS 1.3.

02

Encrypted at rest

Guides, settings and analytics are stored with AES-256 encryption.

03

Single sign-on

Sign in with Okta, Azure AD or Google. SAML SSO is available on Enterprise.

04

Zero-knowledge

Sensitive user data is processed in the browser and never stored on our servers.

05

KVKK & GDPR ready

Built for Turkish and European data-protection law, with a data processing agreement on Enterprise.

06

Enterprise controls

Activity log, SLA and a custom contract for teams that need an audit trail.

How your data flows

What stays with you, and what reaches us.

Nextadop sits on top of your software. It reads the page to place guidance, but it does not copy what your people type.

  1. 1

    Loads in the browser

    A lightweight snippet or the browser extension starts Nextadop next to your application. No change to your product.

  2. 2

    Guidance renders on top

    Tooltips, hotspots and walkthroughs are drawn over your app. Form values and passwords stay in the browser.

  3. 3

    Guide events are sent

    Which guide was shown and which step was completed or skipped. These events travel over TLS 1.3.

  4. 4

    Stored encrypted

    Events and content are kept with AES-256 at rest. Your team sees completion and drop-off in analytics.

Enterprise

Controls your security team will ask for.

Everything in the platform, plus the paperwork and guarantees large organisations need.

See the Enterprise plan
  • SAML single sign-on
  • Activity log
  • SLA
  • KVKK / GDPR data processing agreement
  • Dedicated customer success manager
  • Custom contract & TL invoicing
Compliance & documents

Everything in writing.

Read how we handle personal data, or reach us for a security review.

FAQ

Questions, answered.

In the secure cloud infrastructure we use to provide the service, in Turkey or abroad, within the framework of articles 8 and 9 of the KVKK.

No. Nextadop works as a transparent layer; sensitive data such as passwords and form values is processed in the browser and never stored on our servers.

Yes. Data travels over TLS 1.3 and is stored with AES-256 encryption at rest.

Yes: Okta, Azure AD and Google. SAML SSO and an activity log are included on Enterprise.

Yes. Enterprise includes a KVKK / GDPR data processing agreement and a custom contract.

For as long as the purpose of processing requires, or during the general statute of limitations so it can serve as evidence in a possible dispute.

See it on your software

Let’s build your first guide together.

Thirty minutes, your own application, a real guide at the end. No slides.