How Hikanova Protects User Data Under Indonesia's PDP Law

The more businesses adopt AI, the more it matters that customer data stays safe. At Hikanova, data isolation and encryption aren't add-ons, they're part of the design from day one, across every product.
Why Data Privacy Can't Be an Afterthought
Indonesia's Personal Data Protection Law (UU PDP No. 27/2022) set a new bar for software builders in the country. For us, compliance isn't something we bolt on later, it's part of how we design systems from the first line of code.
- •Each client's transaction and conversation data is stored separately, never mixed with anyone else's.
- •User data is never used to retrain any third-party AI model.
- •Data is encrypted with AES-256 at rest and TLS 1.3 in transit.
- •Every system action is logged automatically, without storing sensitive personal data in the logs.
Data Isn't Kept Longer Than It Needs to Be
The biggest worry businesses have about adopting AI is leaking trade secrets or customer contacts. At Hikanova, products like Cierra (WhatsApp AI sales agent) strip sensitive data out before it ever reaches the language model. Identifiers are masked through tokenization, and can only be unmasked inside the client's own environment.
“The most valuable artificial intelligence is one that enterprise stakeholders can trust unconditionally with their highest-stake data assets.”
· Deska, Founder, PT Hikarsa Nova Indonesia
Technical Specifications
Our Commitment
As a software holding company formally registered under Indonesia's OSS system (KBLI 62199), we want to prove that software built in Indonesia can match global standards, without cutting corners on user data security.