Skip to content
A dark, quiet room with a long table and a bright window at the far end
Governance

Audit, risk, compliance.

The governance posture of the holding company. Operating subsidiaries inherit the Group baseline and add the regulatory regime of their category.

  1. Audit posture.

    The Group is structured to support independent audit at the holding-company and subsidiary levels. Audit and assurance arrangements are disclosed to qualified counterparties under NDA.

  2. Risk and compliance.

    Each operating subsidiary is responsible for the regulatory regime of its category. The Group office maintains a single risk register across platforms, reviewed on a recurring cadence by the principals.

  3. Cryptographic standards.

    Every platform that handles customer data inherits the Group’s cryptographic baseline: end-to-end encryption at rest and in transit, isolated key custody, and an audit log architecture designed for regulated environments.

  4. Data sovereignty.

    Customer data is held inside the customer’s jurisdiction by default. Cross-border transfer happens only with explicit customer authorisation and only via the Group’s cryptographic substrate.

  5. Operator accountability.

    Every Group platform has a named operating principal accountable to the holding company. Principals carry economic alignment with the platform they operate.

Compliance and audit enquiries.

A white robotic hand, its fingers raised, in drifting smoke against dark blue
Next

Sectors

Kong Group operates across seven fields, from AI Development, Software Engineering and Cloud Computing to Film & Media Production and Fintech.