Trust & security

Certifications & compliance

SOC 2 Type II

Independently audited and certified. Our SOC 2 Type II report is available upon request under NDA.

Penetration testing

We undergo regular third-party penetration tests to identify and remediate vulnerabilities.

GDPR compliant

Full compliance with the EU General Data Protection Regulation, including data processing agreements.

CCPA compliant

Full compliance with the California Consumer Privacy Act for US-based clients.

Security features

✓ SAML single sign-on (SSO)
✓ SCIM provisioning
✓ Multi-factor authentication
✓ OAuth 2.0 / OpenID Connect
✓ Granular permission levels
✓ IP range restrictions
✓ Encryption at rest and in transit
✓ Secure cloud-based architecture

Safely backed up

We make backups of all your data on an hourly basis (stored for 5 weeks), and additional snapshots on a weekly basis (stored forever).

Your data stays yours

We do not train AI models on your data. Your documents and deal information are never used to improve our models or shared with third parties. Each workspace is logically isolated, and your data is deleted upon request.

Questions or concerns?

Reach out to our security team at [email protected] for more information on data privacy and security at Colabra.