Our own ASN. Our own data center. Bangladesh-sovereign.
Regulated workloads (identity, authorization, fraud control) run on infrastructure KaritKarma owns and operates. APNIC member, autonomous system AS 64005, dedicated IPv4 and IPv6 allocations, Tier-3 data center inside Bangladesh.
- ASN
- AS 64005
- Registry
- APNIC member
- Data center
- Tier-3, Dhaka
- Address family
- IPv4 + IPv6
Definition
What infrastructure does KaritKarma operate?
KaritKarma operates its own autonomous system (AS 64005) as an APNIC member, with dedicated IPv4 and IPv6 allocations, and runs production workloads from a Tier-3 data center inside Bangladesh. The platform products (Wenme, Darwan, Aegis) and the wider 22-product catalog all run on infrastructure KaritKarma owns and operates.
Identity, authorization, and fraud-control traffic never requires a foreign cloud hop. A second site is being commissioned in Sirajganj for disaster recovery, with active-active anycast over AS 64005. The deployment envelope for regulated customers is either a dedicated tenant inside our facility or an on-premises tenant inside the customer's data center.
Footprint
Owned, operated, attributable.
Every number on this page is attributable to a registry record or a facility we operate. Nothing aspirational.
Routing announced from our own ASN. BGP peering with upstream transit in Dhaka.
Dedicated cages. N+1 power and cooling. Multi-homed transit. Carrier-neutral facility.
Direct APNIC allocations of both address families. Dual-stack production by default.
Run inside our DC as a dedicated tenant, or on-premises inside your data center.
Network sovereignty
The audit answer is "us."
Bank security teams and regulators want to know who owns the network, where the data sits, and who can reach it. KaritKarma owns the ASN, the IP prefixes, and the cage. That answer holds up under audit without a foreign-cloud asterisk.
Bangladesh-sovereign by default
Production workloads run from a Tier-3 facility inside Bangladesh. Identity, authorization, and fraud-control data stays within the BD regulatory boundary.
No foreign-cloud critical path
Regulated workloads do not depend on a foreign cloud provider for compute, identity, or audit storage. Cloud is used only where it adds zero regulatory exposure.
Operator-owned routing
Routing is announced from AS 64005 with our own IPv4 and IPv6 prefixes. Bank security teams see KaritKarma as the network origin, not a leased reverse proxy.
Dual-site posture
Primary site in Dhaka, disaster-recovery site being commissioned in Sirajganj. Active-active topology over AS 64005 anycast.
Deployment envelope
On-premises, or a dedicated tenant inside our facility.
The control plane sits inside the customer's regulatory boundary either way. We do not ask regulated institutions to send identity, authorization, or audit data outside of Bangladesh.
Dedicated tenant
Run inside KaritKarma's Tier-3 facility as a dedicated tenant. Isolated network segment, isolated database, dedicated identity issuer. Operated by the engineering team that builds the product.
On-premises tenant
Same software, deployed into the customer's data center. Integrates with existing AD/LDAP and core banking without a rip-and-replace. Operated jointly under a runbook signed off at deployment.
Frequently asked
Network and facility questions.
What bank security teams, network architects, and procurement reviewers ask before they accept the deployment envelope.
- What infrastructure does KaritKarma operate?
- KaritKarma operates its own autonomous system (AS 64005) as an APNIC member, with dedicated IPv4 and IPv6 allocations, and runs production workloads from a Tier-3 data center footprint inside Bangladesh. The platform products (Wenme for identity, Darwan for authorization, Aegis for anti-fraud) and the wider 22-product catalog all run on infrastructure KaritKarma owns and operates. Identity, authorization, and fraud-control traffic never requires a foreign cloud hop.
- Where is KaritKarma's primary data center?
- Production runs from a Tier-3 carrier-neutral facility inside Bangladesh. Dedicated cages, N+1 power and cooling, multi-homed transit. A second site is being commissioned in Sirajganj for disaster recovery, with active-active anycast over AS 64005. Workloads are pinned to Bangladesh by design so identity, authorization, and fraud-control data remains BD-resident under PDPO.
- Is KaritKarma really an APNIC member?
- Yes. KaritKarma is an APNIC member with autonomous system number AS 64005 and direct allocations of IPv4 and IPv6 address space. BGP peering with upstream transit providers in Dhaka. This means inbound and outbound routing is announced from the company's own ASN, not borrowed from a hosting provider, which is what regulators and bank security teams expect to see in the audit trail.
- What deployment options exist for the platform products?
- Two. Customers can take the platform product (Wenme, Darwan, or Aegis) as a dedicated tenant inside KaritKarma's Tier-3 data center, or deploy on-premises inside their own data center as a tenant we operate. Both topologies are designed so the identity and authorization control plane lives inside the customer's regulatory boundary.
- How does the network sovereignty story map to Bangladesh Bank requirements?
- Bangladesh Bank's Cyber Security Framework, BB Partner Network BRPD-2, and PDPO each push regulated workloads toward data residency, controlled vendor access, and auditable network paths. Running on KaritKarma's own ASN inside a Tier-3 BD facility gives institutions a defensible answer to data-localization, vendor-network-isolation, and incident-response-locality clauses without having to reverse-engineer a foreign cloud provider's posture.
- Does KaritKarma operate IPv6?
- Yes. APNIC allocates IPv4 and IPv6 address blocks to KaritKarma directly, and the production network advertises both families over AS 64005. New services are dual-stack by default.
Next step
Book a technical briefing.
A 45-minute session with the engineer who will be responsible for your deployment. We walk through the routing, the cage, and the deployment envelope before anyone signs anything.