Trust & Security - SOC 2 Type 2, Privacy, and Data Controls | Cor
TRUST & SECURITY

Governance and security, ready before your security team asks.

SOC 2 Type 2, granular privacy, retention, and access controls - governance built into Cor from day one.

COMPLIANCE

SOC 2 Type 2 Certified.

Our SOC 2 Type 2 certification verifies that our data handling, access controls, and incident response protocols hold up under real-world scrutiny - and we make it easy for your security team to confirm that for themselves.

SOC 2 Type 2 Certified
CONTROLS

The dials are yours.

When Privacy Mode is enabled, Cor does not record the session - no video, no audio, just a redacted transcript. Obi still guides the customer flawlessly, discarding all sensitive data on the go.

Customer data stays in the session - it does not enter your logs. Cor automatically detects and redacts personal information before transcripts are saved.

You decide how long the data lives - we handle the deletion. Choose the window that matches your compliance requirements.

Privacy Mode toggle
USER CONSENT

Nothing happens without explicit permission.

Browser screen-share picker showing app.coragents.ai requesting access
· 01

Share screen.

User-initiated, every time. Obi cannot see anything until the customer chooses to share. Screen sharing only begins when they click to allow it - never silently in the background.

Cor agent confirmation dialog asking the user to approve an action
· 02

Confirm action.

Before Obi clicks, types, or completes a step on their behalf, the customer confirms it. They stay in the driver's seat - Obi proposes, they approve.

End call confirmation dialog
· 03

End session.

The customer ends the session at any time. The connection drops immediately, the screen share stops, and no background access remains. Their control is absolute, from the first second to the last.

FAQ

Frequently asked
questions.

Built so security reviews go fast.

Obi is built secure from day one - SOC 2 Type 2, end-to-end encryption, granular controls, and full audit trails. Everything your security and compliance teams need to sign off, ready before they ask.