Compliance

Compliance

What we have today, what is on our roadmap, and how each framework applies.

Current Controls

  • Encryption at Rest
  • TLS Encryption
  • Passkeys
  • MFA
  • RBAC
  • Audit Logging
  • NIST SP 800-63B password policy
  • Compromised-password screening (HIBP)

Planned Controls

Roadmap—not yet achieved.

  • Enterprise compliance program

Security resources

Published material and roadmap documents for vendor reviews. Email [email protected] for questions or restricted materials.

Security Whitepaper

public

Encryption, access control, and how coThink runs in production.

Read the whitepaper →

Architecture Overview

planned

BYOM workspace layer, data flows, and integration boundaries.

SOC 2 Reports

planned

Audit reports when certifications are completed.

Penetration Test Summaries

planned

Executive summaries from third-party assessments.

Vendor Security Package

planned

Policies and security docs bundled for vendor reviews.

Compliance

GDPR

Policy aligned

EU personal data handling commitments documented in our Privacy Policy and Data Processing Addendum.

CCPA / CPRA

Policy aligned

California privacy rights and disclosures described in our Privacy Policy.

SOC 2 Type I

Roadmap

Point-in-time assessment of security control design.

SOC 2 Type II

Roadmap

Independent attestation of operating effectiveness of security controls over time.

ISO 27001

Roadmap

Information security management system certification.

Contact security & compliance · Data Processing Addendum · Subprocessors · Controls