Security at Cofoundaz

Last updated: July 1, 2026

Your startup runs on Cofoundaz, so security is foundational. Here is how we protect your workspace. This is a v1 layout; final language is provided by counsel.

Isolated workspaces

Every workspace is tenant-isolated with row-level policies enforced at both the gateway and the service layer.

Encryption

Data is encrypted in transit and at rest. The Founder Journal is additionally encrypted with a per-workspace key.

Access controls

Granular, role-based permissions with per-document sharing and a full, immutable audit trail of sensitive actions.

Compliance

We operate against OWASP ASVS L2, run an annual penetration test, and use SOC 2 providers for e-signature and payments.

Resilience

Point-in-time recovery with 30-day backups, versioned document storage, and a tested disaster-recovery plan.