### Collate

# Trust & Security

Last Updated: March 24, 2025

We’re committed to protecting your data with enterprise-grade security, privacy, and compliance. Learn how Collate safeguards your information and supports your regulatory needs.

### Enterprise-Grade Security

- Documents are encrypted at rest using AES-256.
- All server interactions are encrypted using HTTPS with TLS v1.2+.
- Document access is restricted to Collate's secure backend; no public endpoints.

### Third Party Data Retention

- Zero-retention policies for third-party AI providers.
- All AI interactions are ephemeral, secure, and purpose-bound by design.
- Data sent to external providers is never reused or retained on their servers.

### User Authentication

- All data requests are authenticated and authorized.
- MFA, Passkey, SSO, and username-password login is supported.

### Access Control & Authorization

- Isolated database and file storage per customer.
- Admin roles manage user access and configuration.
- Actions including approvals, releases, and training are restricted per user.

[Download our Security Overview](/content/security/Collate_Enterprise_Security_Overview_2025-03-24.pdf)

### We value your privacy

We use cookies to enhance your browsing experience and analyze our traffic. By clicking "Accept", you consent to our use of cookies. [Learn more](/content/legal/privacy/index.html)