Trust & security
Your data, locked to your business.
Privacy and security aren't features — they're the foundation.
Encryption
Data is encrypted in transit (TLS 1.2+) and at rest. Customer files are stored in private, access-controlled buckets.
Access
Only the owner and invited teammates can read submissions. Internal staff access is logged and reviewed.
AI handling
AI features operate on your data only to power your account. Your responses are never used to train third-party models.
Region & hosting
Infrastructure is hosted on globally distributed, SOC 2-certified providers. Data residency options coming soon.
Report an issue
Email security@koko.app — we triage every report within one business day.