Security and data handling
How CognaOne treats your data and its own actions.
Principles#
| Principle | In practice |
|---|---|
| Tenant isolation | Every record belongs to one organisation, and every data path checks it |
| Least privilege | Connectors read only what they need; agents get only the tools they are granted; roles limit what people see and change |
| Append-only records | History and receipts are never edited or deleted; AI systems are never deleted |
| Content minimisation | Usage telemetry is ingested with prompt and personal content stripped |
| Secrets handled properly | Connector credentials are encrypted and rotated, never kept in plain configuration |
| People decide | Suggestions, the assistant and the gate never apply changes or approvals without a person where policy requires it |
| Your data is yours | Native export returns your data without loss |
Your responsibilities#
- 01Protect tokens and keys
Store them in a secrets manager and rotate on suspicion.
- 02Fail closed
Agents must not act if the gate cannot be reached.
- 03Review access
Remove unused tool grants and keep owners current.
For security questions or to report a vulnerability, contact us. Privacy policy: cognaone.com/privacy
Last reviewed October 2026Suggest a change