Trust center
Cortee is built on trust and transparency to protect your data. Here you’ll find how we secure it, and how we handle it.
Security controls
Last scanned 5 hours ago.
A person writes these controls and keeps them up to date. Agents check them against evidence. The mark on the right means that check passed. If you want to see detailed evidence for each security control, please contact us at security@cortee.ai. We may share it with you after a signed NDA.
AI Governance
Activity log
Every AI action is monitored and logged. The log stores the decision, the model, the performance, the anonymized organization, and whether the action was allowed. It does not store the note or the page.
AI disclosure
Generated documents always display that they were created using AI.
Encryption and key management
Encryption in transit
Data is encrypted with TLS 1.2 or newer on the way between a client and the application, between the application and the database, and between the application and the model provider. That stops the data from being read or changed while it is on the way.
Encryption at rest
Customer data in database tables and static attachments, and the backups of both, is encrypted at rest with keys managed in the account that runs the product. Those keys are not issued one per customer.
Key access restricted
Privileged access to those encryption keys is limited to authorized people, and only for the work that needs the key.
Encryption audit trail
Encryption operations are logged. The log covers key generation, key access, and administrative actions on critical production systems.
Password hashing
Clerk, the authentication provider, hashes customer passwords with bcrypt. Bcrypt is a one-way hash, and each hash has its own salt, so two identical passwords do not produce the same hash.
Access control and authentication
Signed third-party events
Events from Clerk and Paddle are accepted only when their signature checks. Both use HMAC-SHA256 and a constant-time compare, and both reject a timestamp older or newer than five minutes. Clerk signs the event id, the timestamp, and the raw body. Paddle signs the timestamp and the raw body. A request that fails the check is rejected before any organization or subscription record is touched.
Public APIs and customer data
The public catalog does not carry a person's access token. Its IAM policy cannot read or write customer data. It can read the plan catalog and nothing in the database.
Organization scoped access
A request that reads or writes a customer's pages, notes, or attachments carries that person's access token. The token assumes an organization-level IAM policy, and the policy allows only the operation that endpoint needs for that organization. A request cannot read data that belongs to another organization.
Logical isolation
Every database table is partitioned by organization. Pages, notes, claims, and attachments use that organization's partition. Organization, subscription, and entitlement rows use the organization id as their partition key. An IAM policy allows a request to touch only its own partition, so organizations are separated in the data and in the policy.
Least privilege
Each microservice has its own IAM policies. The signed-in person assumes those policies through their access token, scoped to their organization. That microservice can reach only the tables and operations it needs, and only inside that organization's partition.
Single Sign On
All users may log in using their Google and GitHub credentials as an SSO provider.
Multi-factor authentication
Two-step verification is available on every plan. A person can use an authenticator app (TOTP), a passkey with biometrics, or a one-time code sent by email. Requiring it for a workspace is done by contacting customer support.
Sign-in sessions
A person can see where they signed in, when they signed in, and which computers they used. They can also see which of those sessions are still active, and they can sign out of all sessions themselves.
Role-based access
Every organization can assign Admin or Member in a team space. View-Only is available on specific plans. Admins manage payments, the subscription, invoices, organization details, and members. They can also do everything a member can do. Members create, update, and delete pages, including notes and attachments. View-only members can read pages, references, and attachments, and they can search. They cannot change anything.
Automated user provisioning
Enterprise customers can request SCIM. It creates and removes users and groups from their identity provider. A person removed through SCIM loses access within 60 seconds.
Incidents and recovery
Backups
Point-in-time recovery is available for database tables.
Infrastructure as code
Infrastructure is created from code. In a disaster it can be deployed again in a new location.
Disaster recovery plan
A disaster recovery plan says how critical systems keep running and how data is restored.
Breach notification
Within 72 hours after Cortee becomes aware of a security breach, the affected customer is notified. The incident is published on the security page under Updates.
Incident response plan
An incident response plan says how an incident is handled.
Post-incident review
After an incident, the review records what has to change so the same incident does not happen again.
Practiced recovery
Recovery and incident response are practiced.
Secure development
Infrastructure changes
Application code and infrastructure changes are kept apart. Infrastructure is planned, reviewed, and applied by a person. No AI system plans, reviews, or applies an infrastructure change.
Agents do not change infrastructure
Agents do not create infrastructure and do not change IAM policies, unless a person has defined the change and reviewed it.
Vulnerability audits
A vulnerability audit runs on every deploy and once a day. Dependencies are scanned automatically. The application is scanned by reviewing every change before it reaches production. Every finding is reviewed. A deploy cannot go out while the code has a vulnerability.
Reporting vulnerabilities
Anyone may report a vulnerability they have found by sending it to security@cortee.ai. Reports are processed manually. High and critical vulnerabilities are answered within a short time.
Secure coding training
Developers have to take OWASP secure coding training.
Network and infrastructure security
Access logging
All access to every service is logged and monitored. Each record includes the IP address, the user, and the organization.
Firewall rules
The firewall is configured against common vulnerabilities, including injection attacks.
Rate and burst limits
The firewall enforces rate limits and burst limits.
Export sanctions
The firewall enforces software export sanctions. Countries embargoed by the European Union or the United States cannot reach the application.
Private backend services
The application and the backend share a credential. The backend accepts a product request only when that credential matches, so those services are reached from the application. The application is protected by a firewall. Reading or writing a customer's data also requires that person's access token, and the token is limited to their organization.
Audit log
Audit logs capture key events, including page activity, data source changes, admin and security actions, user identification, IP addresses, event types, timestamps, and whether the event succeeded or failed.
Log archival and retention
Audit and access logs are kept for 30 days. They are kept longer only where the law requires it.
Audit log export
A customer can request an export of the audit log for their own organization's data. The export is prepared manually.
Firewall changes
Changes to the firewall are logged and monitored, and the ability to make those changes is restricted.
Firewall review
Firewall rules are reviewed. Requests at the CDN are checked once a week, and that review is used to decide whether the firewall needs to change.
Change management
Pre-production testing
Changes are tested in pre-production before they reach production.
Automated and agentic testing
Changes go through automated testing and agentic testing.
Environment segregation
Environments are segregated from each other. Production data is never copied into testing.
Human review
A change does not ship until a person has reviewed it.
Rollback
Every change can be rolled back.