Security

Your network data is sensitive. We treat it that way.

An inventory of your network is a map of your infrastructure. Before you share any of it with us, your security team should get clear answers to the questions below.

HOSTINGUK regions only[PLACEHOLDER: provider and region]
ENCRYPTIONTLS 1.2+ in transit, AES-256 at restAll storage and backups
ACCESSSSO, MFA and role-based accessSAML · OIDC · SCIM on Enterprise
ASSURANCEISO 27001 · Cyber Essentials Plus[PLACEHOLDER: status]

What we put in writing before you share data

  • Where your data is hosted, and in which region
  • How it is encrypted in transit and at rest
  • Who at TOCLOCO can access it, and how that access is controlled and logged
  • Single sign-on and role-based access for your own team
  • How data is backed up, how long it is retained, and how it is deleted when you leave
  • Our certification status and the independent assessments we have completed
  • How we tell you about a security incident

How to get it

Ask for our security pack when you book a demo, or have your security team raise it during the call. We answer security questionnaires as part of evaluation, not after you have signed.

To report a vulnerability, email security@netcosm.com. [PLACEHOLDER: confirm mailbox]

Ask us the hard questions

Bring your security questionnaire to the demo. An engineer answers it live.