Security & trust

We keep the record, not your documents.

Cognitiva is built so that the sensitive parts are handled by regulated specialists and we hold the result.

Identity and business checks

Documents stay with the provider. We store the outcome.

Documents captured and held by our identity-verification provider under its own regulatory attestation; business and tax data from licensed providers. Cognitiva stores the outcome, a reference and the expiry.

Money

Held and moved by licensed payment partners.

Funds held and moved by licensed payment partners. Cognitiva never holds client money on its own balance sheet. Funds set aside per deal, released on approval; every movement on the record.

Data

Where it lives, how it is protected, how you reach it.

Platform and records hosted on AWS (us-east-1, us-west-2 for US-originated data; eu-west-1, eu-central-1 for EU-originated data, EU-only residency on request). Documents hosted on Google Cloud (us-central1, europe-west1).

Encrypted in transit and at rest, access logged.

UAE data under the PDPL, EU under GDPR, US under state law, India under the DPDP Act with a Grievance Officer appointed before launch.

Access, correction, objection and deletion requests via the form on this page, live today. Sub-processor list on request: our email address

Ask for your record. Correct it. Object to it.

We use the details you send only to respond to this request. How we handle personal data is set out in our Privacy Policy.

Data we license

Anonymised and aggregated, never identifying.

Raw campaign data belongs to the customer and is never sold. Cognitiva creates and may license anonymised, aggregated datasets, never data that identifies a customer or a creator, and customers can opt out of future contributions. Section 11.7 of the Privacy Policy sets out what the datasets contain, who may license them and how to opt out.

Certifications

Published as audits complete, not before.

SOC 2 is in planning. No certification is held yet; status published here as audits complete, not before.

Audit trail

One exportable record per deal.

  1. 01Checks
  2. 02Contract
  3. 03Posts
  4. 04Disclosure rule applied
  5. 05Approvals
  6. 06Payments
Report a concern

security@cognitivasystems.com

Answered directly, no ticket queue. We acknowledge every report within 1 working day (US, Washington, DC working days).

Security and trust: the record, not your documents | Cognitiva