OST KYC APIs and tools are SSL protected and its infrastructure is hosted on AWS VPC (Virtual Private Cloud). 
Traffic to and from VPC stays within the company's firewall without entering the mainstream Internet.