Security & Trust

Your data is safe
with CommOS.

Enterprise-grade security is built into every layer of CommOS — from data at rest to AI inference pipelines.

Type II Compliant
SOC 2
EU Data Protection
GDPR
Encryption at rest
AES-256
Encryption in transit
TLS 1.3
How we protect you

Built secure from the ground up

Every CommOS feature goes through a security review before it ships. Here’s what that means for your data.

Data encryption

  • AES-256 encryption for all data at rest
  • TLS 1.3 for all data in transit
  • Isolated encryption keys per customer
  • Database-level field encryption for PII

Access controls

  • Role-based access control (RBAC)
  • Single Sign-On (SSO) via SAML 2.0
  • Multi-factor authentication (MFA)
  • Session timeout & IP allowlisting

Infrastructure security

  • Hosted on ISO-27001 certified infrastructure
  • SOC-2 Type II third-party audit
  • Auto-scaling with DDoS protection
  • 99.9% uptime SLA with real-time status page

Data privacy

  • GDPR & CCPA compliant by default
  • Data residency options (EU, US)
  • Right-to-erasure request handling
  • No data used to train third-party AI models

Vulnerability disclosure

Found a security issue? We want to know. We operate a responsible disclosure programme and respond to all reports within 24 hours.

Report a vulnerability

Send a detailed report to our security team. We will investigate and keep you updated throughout the process.

[email protected]