Snapshot 156903
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Welcome to Codat's security and trust portal We know it’s important that the information you share is secure, handled responsibly, and used in ways that respect your privacy. Since day one, we’ve worked with financial and accounting data and built our systems, processes, and culture to keep it safe. Transparency builds trust, so have a look around and reach out with any questions. security@codat.io Privacy PolicyOpens in new tab Codat is an advisory intelligence solution purpose-built for modern commercial banking. Through rich, specialized data, forward-looking insights, and integrated workflows, Codat empowers banking teams to deepen their relationships, grow their revenue, and simplify their day-to-day work. Founded in 2017 and backed by JPMorgan, PayPal, Amex, Plaid, and Shopify, Codat has successfully powered over 350,000 connections to business customers’ financial systems — and is trusted by industry leaders to turn scattered information into actionable, strategic advantages in real time, every time. Compliance SOC 2 ISO 27001:2022 Resources View all AI whitepapers Intelligent Upload AI Whitepaper Lending Categorization AI Whitepaper Payment Method Inference AI Whitepaper Audit Codat SOC 2 Type 2 Report Insurance Codat Letter of Insurance (Redacted) 2026 Policies Acceptable Use Policy Access Control Policy AI Tooling Policy AI Use in Codat Products Policy View 16 more Test results Codat Penetration Test 2026 Codat Business Continuity Plan Test Results 2026 Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 4 more Infrastructure security controls Organizational security Employee background checks performed Code of Conduct acknowledged by contractors Code of Conduct acknowledged by employees and enforced View 5 more Organizational security controls Product security Control self-assessments conducted Penetration testing performed Vulnerability and system monitoring procedures established Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 22 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Data collected Customer personally identifiable information Employee personally identifiable information Accounting data Credit card information Personal health information Critical Third Parties View all Microsoft Azure • Cloud provider UK South, UK West, US East Microsoft Azure perform all processing and storage of data on behalf of Codat via their PaaS product solution. Updates View all Incident HP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) Published October 23, 2026 On 21 October 2026, the PHP project released security updates for two critical remote code execution vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). We have reviewed the Codat product and can confirm that it is not affected. Our production platform, APIs and customer-facing portals are not built in PHP, and no system that stores, processes or has access to customer data, credentials or API keys runs PHP. No action is required from customers, and no remediation is needed on the Codat product. We will continue to monitor the situation and will update this notice if anything changes. If you have any questions, please contact compliance@codat.io. General SOC 2 Type 2 report issued - audit period 1 July 2025 to 30 June 2026 Published August 24, 2026 Codat's SOC 2 Type 2 report for the period 1 July 2025 to 30 June 2026 has been issued. Request access via the Trust Center to view the full report!