Security

Your clients’ data, protected.

When you handle sensitive client data, security isn’t a feature — it’s the foundation. Coco is built to the standards the largest firms demand.

Visit our compliance site compliance.combinely.ai
  • SOC 2 Type II
  • UK GDPR
  • No AI training on your data
  • You approve every piece of work

How we protect your data

Security in every layer.

Trusted data storage

Flexible storage options designed to match different data sensitivity levels and compliance needs. Your confidential data remains secure and private to you.

No AI training

Your data is never used to train or fine-tune any AI models. We use commercial AI infrastructure with strict data processing agreements that prohibit model training on customer data.

Strict access controls

Every access request is verified and logged. Your data is only accessible to authorised users, and our team requires written approval to access customer data for support purposes.

Encryption everywhere

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Encryption keys are managed through AWS KMS with automatic rotation.

Certifications & compliance

Audited, documented, and in your control.

Our dedicated compliance site, with the detail on our certifications and security programme, is at compliance.combinely.ai.

SOC 2 Type II

We’ve completed a rigorous independent audit of our security controls against the Trust Services Criteria. Our SOC 2 Type II report is available on request.

Visit the compliance site

UK GDPR & EU GDPR

Full compliance with UK and European data protection regulations. We provide a Data Processing Agreement and support data subject rights requests.

Data Processing Agreement

You stay in control

Coco prepares the work and flags what needs your judgement. Nothing is finalised until someone at your firm reviews and approves it.

Policies & documents

References and full reports: available on request via compliance.combinely.ai.

Questions about security?

We’re happy to talk through our security practices, share our SOC 2 report, or set up a dedicated security review call with your team.