Audit readiness
Real-time compliance monitoring keeps controls, policies and documentation aligned with requirements, so we can respond quickly to security reviews.
Security center
Enterprise-grade security, built in.
Compliance, encryption and continuous monitoring protect your project data and help you meet regulatory standards, while reducing risk exposure.
Security at a glance
In place: AES-256 encryptionAt rest and in transit- In place: Policies aligned to ISO 27001Plus Cyber Essentials and Cyber Essentials Plus certified
- In place: SOC 2 Type 2Adheres to SOC 2 Type 2 security controls
Capabilities
How we protect your data
IT policy compliance
Security policies enforced across all systems, aligned with ISO 27001, Cyber Essentials and Cyber Essentials Plus, with regular assessments.
Cyber vigilance
Continuous threat monitoring, phishing protection and malware defense, plus mandatory security training for every employee.
Data encryption
AES-256 encryption for all project data, at rest and in transit.
SOC 2 Type 2 compliant
Adheres to SOC 2 Type 2 security controls
FedRAMP Ready
Cora has undergone a preliminary FedRAMP assessment, passing an initial security review.
Same permissions as the person asking- Nothing changes until a person applies it
- Every applied change carries a name in the audit trail
Governed by design
AI a risk committee can approve
taivo, the AI assistant in antaivo, works within the same permissions as the person using it. It proposes, a person applies, and every action is logged against their name, because the safety is in the architecture rather than the policy.
FAQs
Security, answered
Cora keeps detailed logs of all relevant system activities, access controls, and security events, ensuring comprehensive audit trails are always available. Activities are date and time stamped giving you a full audit history.
Trust center
Need our security documentation?
Request policies, questionnaires and audit evidence for your security review.