Security at CORPYO
Last updated: January 2026
CORPYO is committed to protecting the data of every business and individual on our platform. Below is an overview of our current security posture and roadmap.
Encryption in transit and at rest
All data transmitted between clients and CORPYO servers is encrypted using TLS 1.2 or higher. Sensitive data stored in our databases is encrypted at rest using AES-256.
Security controls
Internal controls, audit logging, and incident-response procedures cover the security, availability and confidentiality of client data. Access to production systems is least-privilege and requires multi-factor authentication; access and administrative actions are logged and reviewed.
Responsible disclosure
We operate a responsible-disclosure program. If you discover a potential security vulnerability, please report it to [email protected]. We commit to acknowledging all reports within two business days and to keeping reporters informed throughout remediation.
Access controls
CORPYO enforces least-privilege access internally. All production systems require multi-factor authentication. Access logs are retained and reviewed regularly.
Data protection
We align our data-handling practices with GDPR, CCPA, and regional data-protection laws. Personal data is processed only for the purposes described in our Privacy Policy and is never sold to third parties.
Incident response
We maintain a documented incident-response plan that is tested annually. In the event of a breach affecting your data, we will notify affected customers within 72 hours of becoming aware, consistent with applicable law.
Security contact: [email protected]