Security Policy

Cohesive expects to complete a SOC II Type I certification by end of 2023.

However, Cohesive maintains strict security measures for its solution, including:

  • Confidentiality: Cohesive utilizes best-in-class encryption protocols to keep your data safe. Our infrastructure enforces the use of TLS 1.2 to encrypt data in transit between your application and Cohesive. All data is encrypted at rest using AES 256 bit encryption.

  • Security:

    • All Cohesive personnel have the training, tools, and knowledge to work securely. We take a radical approach to our security audit and never compromise the security of our product under any circumstances.

    • Changes to our product must be implemented and designed by authorized Cohesive personnel. We have real-time alerts for any security incidents involving our development resources. Access to our source code and development resources is restricted and verified via 2FA protocol. Any resource that has been compromised will be immediately revoked.

    • Cohesive is hosted on industry-leading cloud infrastructure (AWS and Azure) leveraging years of safety enhancements to ensure maximum performance, resilience, and speed of deployment.

Cohesive is happy to sign security or compliance-related agreements, or otherwise be as transparent as possible.

Last updated