Security and compliance

A no-logs, open-source, post-quantum-encrypted VPN, with a technical document, a bug bounty programme, a data processing agreement and security questionnaire answers.

Services in this solution.

How it starts Get started in three steps

  1. 01

    Review the documents

    The security whitepaper, open-source code and the Trust Centre are public.

  2. 02

    Send your questions

    You send your security team's questions and questionnaires by email.

  3. 03

    Written answer

    Our technical team prepares the answers and the required agreements during the quote process.

Opportunity

Launch your own VPN brand

Anyone with an audience can sell a VPN. We operate the apps, servers and panel; the brand, price and customers are yours.

FAQ

Frequently asked questions

Is no data kept at all?

Only the limited information needed for the service, such as account, subscription and device, is kept. What is kept and for how long is written in the security whitepaper and the privacy policy.

Is the server side open source too?

The apps are open source; how the server infrastructure works is described in the security whitepaper.

Does post-quantum encryption affect speed?

The key exchange happens once at the start of a connection; you will not notice it in daily use.

Which languages is the document in?

Published in Turkish, English and Russian.

Are vulnerabilities that are found reported to customers?

Where there is an impact, we publish an announcement under our responsible disclosure policy.

Can we use our own DPA template?

Yes, we can review your template and, if needed, discuss it and sign.

Get a quote

Let's talk about your company

Business is not sold through the plans on the site. Fill in the form; our team will ask about your needs and send the quote by email.

  • We do not ask for card details
  • Correspondence in Turkish, English or Russian
  • Your details are not added to a newsletter list

If you prefer email: support@colitu.com

Team size
Service you are interested in

Your details are used only for the quote; they are not added to a newsletter list.