Founded in 2024

Cold recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners.

As a service provider/product, we understand the importance in providing clear information about our security practices, tools, resources and responsibilities within Cold so that our customers can feel confident in choosing us as a trusted provider.

This Security Posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve.

## Compliances

### SOC 2

Compliant

### GDPR

Compliant

### UK GDPR

Compliant

## Trusted by

### LinkedIn

### Various tech startups

### OpenAI

### Linear

## Controls

### Product security

Situational Awareness For Incidents

### Data security

Termination of Employment

Encrypting Data At Rest

Data Backups

View 1 more control

### Network security

Limit Network Connections

External System Connections

Transmission Confidentiality

View 3 more controls

### App security

Conspicuous Link To Privacy Notice

Secure system modification

### Endpoint security

Malicious Code Protection (Anti-Malware)

Full Device or Container-based Encryption

Endpoint Security Validation

View 2 more controls

### Corporate security

Code of Business Conduct

New Hire Policy Acknowledgement

Security & Privacy Awareness

View 26 more controls

## Resources

### Policies

- Acceptable Usage Policy
- Access Control Policy
- Access Control Procedure
- Asset Management Policy
- Asset Management Procedure
- Business Continuity & Disaster Recovery Policy

## Subprocessors

### Tavily

Artificial Intelligence

### OpenAI

Artificial Intelligence

### Supabase

IT infrastructure

### Figma

Design

### Deel

HRMS