Obi Trust & Security: SOC 2 Type II & Data Controls | Cor
TRUST & SECURITY

Obi works with your customers. We take that responsibility seriously.

Enterprise-grade security, privacy controls and data protection built for customer-facing AI.

COMPLIANCE

SOC 2 Type II

Cor has completed SOC 2 Type II examination. Our latest report and bridge letter are available on request.

SOC 2 Type 2 Certified
CONTROLS

The dials are yours.

Use Obi without retaining screen recordings. Screen content is processed in real time while a user is actively sharing, but is not retained by Cor after the session.

Customer data is encrypted in transit and at rest. Retention periods can be configured for each agent, and customers can delete their session data themselves at any time.

We do not use customer data to train our models or third-party AI models. You control what information is provided to Obi. Product login credentials are not required, and customers can use non-identifying user IDs where appropriate.

Privacy Mode toggle
USER CONSENT

Your customers stay in control.

Browser screen-share picker showing app.coragents.ai requesting access
· 01

Start and stop sharing.

Screen sharing only begins when the user initiates it. They can stop at any time or continue without sharing their screen; Obi keeps working either way.

Cor agent confirmation dialog asking the user to approve an action
· 02

Only what they choose to share.

Obi only sees the window or tab the customer chooses to share. It does not capture their webcam.

End call confirmation dialog
· 03

Voice input is optional.

Customers can use Obi without voice input if they prefer. They stay in control of how they interact throughout the session.

FAQ

Frequently asked
questions.

Everything your security team needs.

Access our SOC 2 documentation, DPA, subprocessor information, security policies and other due diligence materials through our Trust Center.