Security at Cordiul

Cordiul runs on managed cloud infrastructure: our application is hosted on Vercel and our data lives in Supabase's managed Postgres. Both providers maintain their own independent security certifications, including SOC 2 Type II, and we inherit the physical and network controls they provide. Calling and SMS run on Twilio's telephony infrastructure.

• All traffic is encrypted in transit with TLS.
• Data is encrypted at rest by our database and storage providers.
• CRM access tokens are encrypted at the application level (AES-256-GCM) on top of at-rest encryption. CRMs and mailboxes connect through OAuth, and LinkedIn through our LinkedIn provider's hosted sign-in, so Cordiul never stores your CRM, mailbox or LinkedIn passwords.

• Every workspace's data is scoped to that workspace, enforced in the database layer.
• Team access is invitation-based, and sessions are managed through our authentication provider.
• Internal access to production data is restricted to the small set of people who operate the service, and used only to run and support it.
• Inbound webhooks from telephony and email providers are signature-verified before we process them.

While your account is active you can export your contacts and your suppression list as CSV from the app at any time. For a fuller export, or to have a workspace deleted, email hello@cordiul.com; we handle these requests as described in our Privacy Policy.

Sanad's research and writing run on enterprise AI providers under agreements that do not permit training on your data. Sanad works from your own workspace setup and the prospect in front of it: the prospect and their signal, your company context, personas, value propositions and battle cards, your voice and tone settings, public pages from your website, and open-web research on the prospect.

We are an early-stage company and do not yet hold our own SOC 2 or ISO 27001 certification; the managed providers underneath us do. We are happy to complete security questionnaires, sign DPAs, and walk your team through our architecture. Email hello@cordiul.com.

If you believe you have found a security issue in Cordiul, email hello@cordiul.com with enough detail to reproduce it. We read these reports first, respond quickly, and will not take action against good-faith research.