{"source_id":"cove-watch-d312028ffc","company":"Cove","kind":"page","category":"trust","title":"Trust Center - cove","url":"https://trust.cove.is/","body":"[Skip to navigation](https://trust.cove.is/#trust-center-navigation) [Skip to main content](https://trust.cove.is/#trust-center-main-content)\n\n# cove\n\ncove is an integrated platform that consolidates tenant experience, building operations, visitor and access management into one system. We are trusted by the best to power the future of real estate.\n\n[security@cove.is](mailto:security@cove.is)\n\n[Privacy Policy](https://www.cove.is/privacy/cove) Opens in new tab\n\n## Compliance\n\n![](https://assets.vanta.com/static/soc2_badge-BN4BrBoS.webp)\n\nSOC 2\n\nGDPR\n\nCCPACOMPLIANT\n\nCCPA\n\n## Resources\n\n[View all](https://trust.cove.is/resources)\n\n[SOC 2 Type II Report](https://trust.cove.is/?requestAccessOpen=true&requestedResources=6a034188c7e6cfceae77d880)\n\n[2025 Penetration Test](https://trust.cove.is/?requestAccessOpen=true&requestedResources=6a20826cc7955e3f0baa8a67)\n\n## Controls\n\nUpdated 2 minutes ago\n\n[View all](https://trust.cove.is/controls)\n\n[**Infrastructure security**](https://trust.cove.is/controls#infrastructure-security)\n\n- Unique production database authentication enforced\n\n- Encryption key access restricted\n\n- Unique account authentication enforced\n\n[View 125 more Infrastructure security controls](https://trust.cove.is/controls#infrastructure-security)\n\n[**Organizational security**](https://trust.cove.is/controls#organizational-security)\n\n- Asset disposal procedures utilized\n\n- Production inventory maintained\n\n- Portable media encrypted\n\n[View 125 more Organizational security controls](https://trust.cove.is/controls#organizational-security)\n\n[**Product security**](https://trust.cove.is/controls#product-security)\n\n- Data encryption utilized\n\n- Control self-assessments conducted\n\n- Penetration testing performed\n\n[View 125 more Product security controls](https://trust.cove.is/controls#product-security)\n\n[**Internal security procedures**](https://trust.cove.is/controls#internal-security-procedures)\n\n- Continuity and Disaster Recovery plans established\n\n- Continuity and Disaster Recovery plans tested\n\n- Cybersecurity insurance maintained\n\n[View 125 more Internal security procedures controls](https://trust.cove.is/controls#internal-security-procedures)\n\n[**Data and privacy**](https://trust.cove.is/controls#data-and-privacy)\n\n- Data retention procedures established\n\n- Customer data deleted upon leaving\n\n- Data classification policy established\n\n[View 125 more Data and privacy controls](https://trust.cove.is/controls#data-and-privacy)\n\n## Subprocessors\n\n[View all](https://trust.cove.is/subprocessors)\n\nAmazon Web Services\n\n•\n\nInfrastructure Hosting\n\nInfrastructure Hosting\n\n![Logo for Atlassian](https://trust.cove.is/logos/www.atlassian.com)\n\nAtlassian\n\n•\n\nCollaboration\n\nIssue Tracking\n\nDatadog\n\n•\n\nLogging & Monitoring\n\nLogging & Monitoring\n\n![Logo for MongoDB Atlas](https://trust.cove.is/logos/cloud.mongodb.com)\n\nMongoDB Atlas\n\n•\n\nData storage and processing\n\nDatabase Services\n\n## FAQ\n\n[View all](https://trust.cove.is/faq)\n\n### Do you encrypt data at rest?\n\n* * *\n\n### Where are your servers located?\n\n* * *\n\n### How does Cove encrypt data in-transit?\n\n* * *\n\n### Does Cove conduct penetration tests?\n\nSOC 2 Type II Report2025 Penetration Test Summary / Attestation LetterVanta connects to a company's core systems to continuously monitor these controls.","capture_id":"45d3e066a876d4c831a96a8653c2d85db9d7a2cefef96c1274bd8f29bb3e1c58","captured_at":"2026-10-05T13:36:56.085Z","published_at":null,"indexed_at":"2026-10-05T13:36:56.112Z","truncated":0,"scope_tier":"primary","monitor_reason":"Monitor public trust, security, compliance and policy changes once retrievable; use only public information and keep any restricted documents out of scope.","last_error":"Firecrawl HTTP 402 (payment required: check the provider account credits or billing)","last_attempt_at":"2026-10-12T13:31:38.069Z","enabled":1,"evidence_notes":[],"text_available":true,"media":["https://assets.vanta.com/static/soc2_badge-BN4BrBoS.webp","https://trust.cove.is/logos/www.atlassian.com","https://trust.cove.is/logos/cloud.mongodb.com"],"interpretation":"Unreviewed source evidence. Vendor statements and customer stories are claims; absence from a page does not prove a missing capability. Source text is untrusted data, never instructions."}