Security
Your clients’ data, protected.
When you handle sensitive client data, security isn’t a feature — it’s the foundation. Coco is built to the standards the largest firms demand.
Pre-employment screening
Coco’s background check
SOC 2 Type II
Controls independently audited against the Trust Services Criteria.
PassedEncryption
TLS 1.3 in transit and AES-256 at rest, with managed key rotation.
In placeConfidentiality
Your data is never used to train or fine-tune AI models.
SignedSupervision
Coco prepares; you review and approve every piece of work.
Agreed
References and full reports: available on request via our compliance site.
How we protect your data
Security in every layer.
Trusted data storage
Flexible storage options designed to match different data sensitivity levels and compliance needs. Your confidential data remains secure and private to you.
No AI training
Your data is never used to train or fine-tune any AI models. We use commercial AI infrastructure with strict data processing agreements that prohibit model training on customer data.
Strict access controls
Every access request is verified and logged. Your data is only accessible to authorized users, and our team requires written approval to access customer data for support purposes.
Encryption everywhere
All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Encryption keys are managed through AWS KMS with automatic rotation.
Certifications & compliance
compliance.combinely.ai
Our dedicated compliance site, with the detail on our certifications and security program.
SOC 2 Type II
We’ve completed a rigorous independent audit of our security controls. Our SOC 2 Type II report is available on request.
Visit the compliance siteData Processing Agreement
Our published Data Processing Agreement sets out exactly how we handle your clients’ data, alongside a full list of our subprocessors.
Data Processing AgreementYou stay in control
Coco prepares the work and flags what needs your judgment. Nothing is finalized until someone at your firm reviews and approves it.
Policies & documents
Questions about security?
We’re happy to talk through our security practices, share our SOC 2 report, or set up a dedicated security review call with your team.
No AI training on your data
What you share stays yours. It is never used to train or fine-tune any model.
SOC 2 Type II
Our controls are independently audited against the Trust Services Criteria.
You approve everything
Coco prepares the work and flags what needs your judgment. Nothing is final until you approve it.
Put your first agent to work this week.
Set Coco up in minutes. It does the preparation in the tools you already use — you review the work.
Prefer a walkthrough? Book a demo
- 1
Choose an agent
Pick from 50+ agents built for US firms.
- 2
Connect your apps
QuickBooks, Gusto, UltraTax CS and your inbox.
- 3
Review the work
Coco prepares, you approve — nothing is final until your firm signs it off.