FAQ
Answers to common trust questions
Quick answers to the security, privacy, and compliance questions we hear most often from customers and partners.
Where is customer data stored?
Customer data is stored on managed cloud infrastructure in the United States and the European Union, depending on the service. Storage locations are documented and reviewed as part of our vendor program.
How is data encrypted?
All data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. Keys are managed by reputable cloud providers and rotated according to documented policies.
Who has access to customer data?
Access is granted on a need-to-know basis, scoped to job function, and requires multi-factor authentication. Privileged actions are logged and reviewed periodically.
How do you handle security incidents?
We follow a documented incident response process covering detection, escalation, containment, communication, and post-incident review. Affected customers are notified in line with applicable obligations.
Do you support SSO and MFA?
Multi-factor authentication is supported for all users. Single sign-on (SAML / OIDC) is offered to eligible enterprise customers. Contact our trust team for SSO availability.
How can I request a SOC 2 report or DPA?
Email trust@cosmoquick.com. Our SOC 2 Type II report will be available under NDA once our audit period concludes. Our standard DPA is available on request.
Do you train AI models on customer data?
We do not use customer or end-user content to train foundation models. AI features are powered by third-party providers under data processing terms that prohibit training on customer prompts.
How do you handle deletion requests?
Verified deletion requests are processed within the timeframes set by applicable law. Customers can request export or deletion through our trust team.
How can I report a security vulnerability?
Email security@cosmoquick.com with reproduction details. Please follow our vulnerability disclosure policy and avoid accessing data that is not your own.
Where can I see real-time service status?
Live availability and incident communications are published at status.cosmoquick.com.
Didn't find what you need?
Reach our trust team directly
Email trust@cosmoquick.com and a member of our team will respond.