Security
Security you don't have to think about
Cookied follows modern security practices to protect data and ensure reliability.
Security Measures
Encrypted data in transit and at rest
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
Access controls and monitoring
Multi-factor authentication, role-based access controls, and regular access reviews.
Regular security reviews
Regular third-party security audits and penetration testing.
Compliance & Certifications
SOC 2 Type II
In Progress
We are undergoing SOC 2 Type II certification to demonstrate our commitment to security and compliance.
GDPR Compliant
Compliant
Fully compliant with the General Data Protection Regulation (GDPR) requirements.
CCPA Compliant
Compliant
Compliant with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
ISO 27001
Planned
ISO 27001 certification planned for 2025 to further demonstrate our security commitment.
Security Practices
Secure Development
We follow secure development practices including code reviews, automated security testing, and regular dependency updates.
Incident Response
We maintain a comprehensive incident response plan and conduct regular drills to ensure we can respond quickly to security incidents.
Employee Training
All employees receive regular security training and are required to follow security best practices.
Vendor Management
We carefully vet all third-party vendors and require them to meet our security standards.
Report a Security Issue
We take security seriously. If you discover a security vulnerability, please report it to us responsibly.
Legal Disclaimer: Cookied provides tools to help implement cookie consent mechanisms based on publicly available regulatory guidance. It does not constitute legal advice.