Data Security
Last Updated: December 2024
At Pibicy, security is foundational to everything we build. We understand that audit professionals handle sensitive data, and we've designed Coauditor with enterprise-grade security from the ground up.
Encryption
- TLS 1.2+ encryption for all data in transit
- AES-256 encryption for data at rest
- AWS KMS for encryption key management
Infrastructure
- Hosted on Amazon Web Services (AWS)
- Regional hosting options available
- Automated backups with point-in-time recovery
Access Controls
- Multi-tenant data isolation
- Role-based access controls (RBAC)
- SSO support (SAML 2.0, OAuth 2.0)
Monitoring & Testing
- Regular penetration testing
- Automated vulnerability scanning
- Comprehensive audit logging
Compliance
We are actively working toward industry-recognized certifications:
- ISO 27001 - Information Security Management (in progress)
- SOC 2 Type II - Security, Availability, and Confidentiality (in progress)
Expected completion: H2 2026
Data Residency
We understand that data residency matters. While our primary infrastructure is hosted in AWS US regions, we offer regional hosting options for organizations with specific data residency requirements, including the Middle East (UAE/Bahrain) region.
AI Processing
Our AI-powered features use leading providers (OpenAI, Google) under enterprise API terms. Your data is processed but never used to train AI models. All AI analysis results are stored securely within our infrastructure.
Data Retention
Your data remains yours. Upon subscription cancellation, we retain your data for 6 months to allow for reactivation. After this period, all data is permanently deleted. You may request immediate deletion at any time.
Contact Us
Have security questions or need additional documentation? We're here to help.
Security Inquiries: security@pibicy.com
General Support: hello@pibicy.com
Patent Pending. Canada's First AI Auditor +
Document Management Platform
Designed to Work Without Any System Integration.
©2025 Pibicy Inc.