CyCognito Privacy, Compliance and Trust Center

Privacy, Compliance and Trust Center

CyCognito strives to be transparent regarding our data processing practices.

CyCognito is continuously expanding our portfolio of security & compliance reports as our customers request them. These widely recognized certifications reinforce CyCognito's position as a secure service provider and demonstrate the company's commitment to maintaining and protecting information security for its customers.

Protecting our customers’ information is our top priority.

The following is the current list of reports available to all Customers and Prospects under NDA. For more information and resources regarding CyCognito’s privacy and data processing practices, please contact CyCognito or reach out to your Account Team for copies of reports as applicable to your organization.

SOC 2 Type II

The SOC2 Type 2 report is an independent auditor’s attestation of the security controls that CyCognito has in place during the report’s coverage period. This report is provided for customers and prospects to review to ensure no exceptions to the documented policies and procedures in the policy documentation.

The SOC 2 Type II compliance was established by the American Institute of Certified Public Accountants (AICPA) and serves as the industry standard for a provider's overall cybersecurity hygiene. It examines an organization's internal controls and systems regarding security, processing integrity, confidentiality, and data privacy.

ISO/IEC 27001

ISO 27001 is a rigorous certification that demonstrates CyCognito's adherence to international standards set by the International Organization for Standardization. The certification is considered the gold standard in information security and is a testament to CyCognito's stringent security processes and practices.

The International Organization for Standardization (ISO) provides requirements for establishing, implementing, maintaining, and continually improving an information security management system.

GDPR

The General Data Protection Regulation (GDPR) is a European Union regulation on information privacy in the European Union and the European Economic Area. The GDPR is an important component of EU privacy law and human rights law, in particular Article 8 of the Charter of Fundamental Rights of the European Union.

CyCognito collects personal data required to create an account and authorize access to our platform and processes such data in accordance with the GDPR.