Kazakhstan Considers National Messaging App Aitu for Insurance Companies

Kazakhstan’s Agency for Regulation and Development of the Financial Market is considering the use of the domestic messaging platform Aitu for remote communication between insurance companies and other non-bank financial institutions and their clients. According to Bloomberg, the regulator has recommended that market participants consider using the Kazakh-developed messenger Aitu as a communication tool. Sources cited by the publication said that insurance and brokerage firms received proposals last month regarding the potential use of the platform, partly aimed at strengthening personal data protection. Market participants expressed concerns, pointing to Aitu’s relatively small user base, limited functionality, potential integration costs, and the absence of clear regulatory guidelines for handling personal and financial data on such platforms. In response, the regulator clarified that the use of Aitu is not being considered mandatory, but rather as an additional secure communication channel between financial institutions and their clients. “This issue is being considered by the Agency in connection with the need to strengthen information security, including the protection of personal data amid rising fraud in financial services. The initiative is also aimed at standardizing communication channels between financial organizations and their clients,” the agency said in a statement. According to the regulator, Aitu’s infrastructure ensures a high level of data protection, in part due to the physical localization of servers within Kazakhstan. This, it argues, reduces risks associated with cross-border data transfers and potential interception of financial information. Additional security features include end-to-end encryption, with access keys stored only on users’ devices, as well as the Aitu Passport system, which incorporates biometric identification and a cloud-based electronic digital signature. The regulator states that these tools provide legally valid user verification and help minimize risks such as phishing and identity theft. The agency also noted that the use of open APIs and business dashboards would allow financial institutions to integrate their systems with the platform at relatively low cost, making use of national digital infrastructure. Government agencies and quasi-state companies had earlier been encouraged to adopt Aitu for official communications. As previously reported by The Times of Central Asia, the rollout of the national messenger has sparked broader debate over the balance between cybersecurity and internet freedom in Kazakhstan.

Kazakhstan’s Rollout of Aitu Messenger Sparks Fears Over Internet Freedom

Kazakhstan is mandating the use of the national messenger Aitu among officials and state-owned enterprises, raising concerns that this move could signal future restrictions on internet freedom. The rollout of Aitu coincides with Russia's introduction of its own national messaging app, Max, which has been accompanied by efforts to block international platforms like WhatsApp and Telegram. The parallels are fueling fears that Kazakhstan may follow a similar path. Why Is Aitu Being Introduced? By September 15, employees of all government agencies and quasi-public sector organizations in Kazakhstan are required to switch to Aitu. The directive comes from the Digital Headquarters under the leadership of Prime Minister Olzhas Bektenov. On August 11, President Kassym-Jomart Tokayev instructed the government to strengthen protections around citizens’ personal data. “A significant part of business and official communication, including the transfer of citizens’ personal data, now takes place through international messengers,” he noted. Tokayev cited examples of sensitive data, such as individual identification numbers and medical information, being transmitted via foreign platforms. He linked this to repeated data breaches, stating that Kazakhstan experienced over 40 major leaks in 2025 alone, including a major incident in June that exposed data on millions of citizens. He argued that Aitu is a necessary step to prevent further leaks. Security Concerns Remain Unanswered Originally launched in 2018, Aitu was used on a limited scale during the COVID-19 pandemic and in educational initiatives. Despite its recent promotion, serious questions about its security remain unanswered. On August 29, Deputy Minister of Digital Development Dmitry Mun confirmed that Aitu is owned by Kazakhtelecom JSC, a national monopoly, and BTS. The app's infrastructure is reportedly hosted entirely within Kazakhstan. However, Yevgeny Pitolin, co-chair of the QazTech Alliance's Information Security Committee, criticized the lack of transparency: “There is almost no information about security. In official responses, the administration avoids these questions, claiming it is a matter of national security.” So far, six million people have registered with Aitu, according to the Ministry of Digital Development. Although this represents nearly one-third of Kazakhstan’s population of 20 million, the ministry has not disclosed how frequently the app is used. A Step Toward a Sovereign Internet? A major point of concern among Kazakhstanis is whether Aitu could pave the way for a sovereign internet model similar to those in Russia or China both of which tightly control domestic digital ecosystems. Russia’s Max messenger, modeled after China’s WeChat, integrates payments, government services, banking, and social networking. Though introduced by VK Corporation, the Russian government has embedded itself in its development. In July, the State Duma passed legislation mandating all official communication between citizens and government agencies to occur via Max. It now comes pre-installed on smartphones, and schools and hospitals are transitioning to it. Crucially, Max works only with SIM cards registered in Russia or Belarus, making cross-border communication difficult. Users have reported frequent disruptions in WhatsApp and Telegram access. Critics argue that the Russian state may be moving toward outright bans on foreign messengers. Kazakhstan Denies Similar Plans...