Kazakhstan Considers National Messaging App Aitu for Insurance Companies
Kazakhstan’s Agency for Regulation and Development of the Financial Market is considering the use of the domestic messaging platform Aitu for remote communication between insurance companies and other non-bank financial institutions and their clients.
According to Bloomberg, the regulator has recommended that market participants consider using the Kazakh-developed messenger Aitu as a communication tool. Sources cited by the publication said that insurance and brokerage firms received proposals last month regarding the potential use of the platform, partly aimed at strengthening personal data protection.
Market participants expressed concerns, pointing to Aitu’s relatively small user base, limited functionality, potential integration costs, and the absence of clear regulatory guidelines for handling personal and financial data on such platforms.
In response, the regulator clarified that the use of Aitu is not being considered mandatory, but rather as an additional secure communication channel between financial institutions and their clients.
“This issue is being considered by the Agency in connection with the need to strengthen information security, including the protection of personal data amid rising fraud in financial services. The initiative is also aimed at standardizing communication channels between financial organizations and their clients,” the agency said in a statement.
According to the regulator, Aitu’s infrastructure ensures a high level of data protection, in part due to the physical localization of servers within Kazakhstan. This, it argues, reduces risks associated with cross-border data transfers and potential interception of financial information.
Additional security features include end-to-end encryption, with access keys stored only on users’ devices, as well as the Aitu Passport system, which incorporates biometric identification and a cloud-based electronic digital signature. The regulator states that these tools provide legally valid user verification and help minimize risks such as phishing and identity theft.
The agency also noted that the use of open APIs and business dashboards would allow financial institutions to integrate their systems with the platform at relatively low cost, making use of national digital infrastructure.
Government agencies and quasi-state companies had earlier been encouraged to adopt Aitu for official communications. As previously reported by The Times of Central Asia, the rollout of the national messenger has sparked broader debate over the balance between cybersecurity and internet freedom in Kazakhstan.
