Combinely

Security

Your clients’ data, protected.

When you handle sensitive client data, security isn’t a feature — it’s the foundation. Coco is built to the standards the largest firms demand.

Visit our compliance site compliance.combinely.ai
SOC 2 Type IIUK GDPRNo AI training on your dataYou approve every piece of work
Cleared

Pre-employment screening

Coco’s background check

  • SOC 2 Type II

    Controls independently audited against the Trust Services Criteria.

    Passed

  • UK GDPR

    Backed by our published Data Processing Agreement.

    Compliant

  • Confidentiality

    Your data is never used to train or fine-tune AI models.

    Signed

  • Supervision

    Coco prepares; you review and approve every piece of work.

    Agreed

References and full reports: available on request via our compliance site.

How we protect your data

Security in every layer.

Trusted data storage

Flexible storage options designed to match different data sensitivity levels and compliance needs. Your confidential data remains secure and private to you.

No AI training

Your data is never used to train or fine-tune any AI models. We use commercial AI infrastructure with strict data processing agreements that prohibit model training on customer data.

Strict access controls

Every access request is verified and logged. Your data is only accessible to authorised users, and our team requires written approval to access customer data for support purposes.

Encryption everywhere

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Encryption keys are managed through AWS KMS with automatic rotation.

Certifications & compliance

compliance.combinely.ai

Our dedicated compliance site, with the detail on our certifications and security programme.

Open compliance site

SOC 2 Type II

We’ve completed a rigorous independent audit of our security controls. Our SOC 2 Type II report is available on request.

Visit the compliance site

UK GDPR & EU GDPR

Full compliance with UK and European data protection regulations. We provide a Data Processing Agreement and support data subject rights requests.

Data Processing Agreement

You stay in control

Coco prepares the work and flags what needs your judgement. Nothing is finalised until someone at your firm reviews and approves it.

Policies & documents

Questions about security?

We’re happy to talk through our security practices, share our SOC 2 report, or set up a dedicated security review call with your team.

Compliance site security@combinely.ai

No AI training on your data

What you share stays yours. It is never used to train or fine-tune any model.

SOC 2 Type II

Our controls are independently audited against the Trust Services Criteria.

UK GDPR compliant

Data protection built in, backed by our published Data Processing Agreement.

Put your first agent to work this week.

Set Coco up in minutes. It does the preparation in the tools you already use — you review the work.

Prefer a walkthrough? Book a demo

  1. 1

    Choose an agent

    Pick from 50+ agents built for UK practices.

  2. 2

    Connect your apps

    Xero, QuickBooks, BrightPay and your inbox.

  3. 3

    Review the work

    Coco prepares, you approve — nothing is final until your practice signs it off.