Cogency provides corporate compliance and transactional services across the U.S., Europe, and Asia-Pacific, with a security program that combines technical safeguards, access controls, employee policies, physical protections, and independent assessment to help protect sensitive legal, corporate, and personal information.
Security Built Into How We Operate
Protect Sensitive Information
Security controls help protect sensitive information throughout its lifecycle, including encryption and established data-classification practices.
Control Access
Access to systems and sensitive information is governed through defined access controls, including multifactor authentication and least-privilege principles.
Evaluate Continuously
Critical systems are subject to recurring security review, including independent penetration testing and vulnerability assessments.
Build Security Awareness
Employees and contractors receive information-security policies and required training designed to reinforce their responsibilities for protecting information.
Need Security or Compliance Documentation?
Find the information your review team needs
Organizations conducting security, privacy, vendor-risk, procurement, or compliance reviews can use the Cogency Global Trust Center to access information about our security program, controls, policies, and independent assessments. It provides a centralized resource for evaluating how Cogency protects sensitive information and supports security and compliance reviews.
Security Practices at a Glance
A high-level view of the controls, policies, and practices Cogency uses to protect sensitive information and support secure operations.
Encryption and Cryptography
Sensitive information is protected using encryption in transit and at rest, including AES-256 encryption for data at rest where applicable.
Identity and Access Management
Access is governed by role and business need, with multifactor authentication and least-privilege principles applied to sensitive systems and information.
Vulnerability Management
Critical systems undergo vulnerability assessments and annual independent penetration testing as part of the ongoing security program.
Data Classification
Information is classified according to sensitivity to help determine the safeguards applied throughout its lifecycle.
Security Awareness
Employees and contractors receive information-security policies and recurring training designed to reinforce secure practices.
Physical Safeguards
Cogency maintains physical-access controls and visitor records for applicable facilities and infrastructure locations.
Standards and Independent Validation
Cogency’s security program incorporates recognized frameworks and independent review to support the protection of sensitive information.
SOC 2 (Type 2)
Independent annual examination of controls relevant to security, availability, and confidentiality.
NIST CSF
Security practices informed by guidance from the National Institute of Standards and Technology.
FIPS 140-2
Cryptographic practices aligned with approved industry standards.