Security at CORPYO
Last updated: January 2026
CORPYO is committed to protecting the data of every business and individual on our platform. Below is an overview of our current security posture and roadmap.
Encryption in transit and at rest
All data transmitted between clients and CORPYO servers is encrypted using TLS 1.2 or higher. Sensitive data stored in our databases is encrypted at rest using AES-256.
SOC 2 roadmap
We are actively pursuing SOC 2 Type II certification. Our internal controls, audit logging, and incident-response procedures are designed to meet the Trust Services Criteria for Security, Availability, and Confidentiality.
Responsible disclosure
We operate a responsible-disclosure program. If you discover a potential security vulnerability, please report it to security@corpyo.com. We commit to acknowledging all reports within two business days and to keeping reporters informed throughout remediation.
Access controls
CORPYO enforces least-privilege access internally. All production systems require multi-factor authentication. Access logs are retained and reviewed regularly.
Data protection
We align our data-handling practices with GDPR, CCPA, and regional data-protection laws. Personal data is processed only for the purposes described in our Privacy Policy and is never sold to third parties.
Incident response
We maintain a documented incident-response plan that is tested annually. In the event of a breach affecting your data, we will notify affected customers within 72 hours of becoming aware, consistent with applicable law.
Security contact: security@corpyo.com