{
  "format": "coriqo.vendor_attestation/1",
  "vendor": {
    "name": "Coriqo",
    "domain": "coriqo.io",
    "contact": "admin@coriqo.io"
  },
  "product": {
    "name": "Coriqo",
    "version": "hosted"
  },
  "issued_at": "2026-10-15",
  "valid_until": "2027-10-15",
  "answers": {
    "training_on_customer_data": {
      "answer": "no",
      "note": "Your data is not used to train models. AI features send one-off requests and keep nothing afterwards."
    },
    "retention_stated": {
      "answer": "yes",
      "note": "Each bank sets how long files are kept, in Settings. A daily job deletes files past that window, and a bank can ask us to delete all of its data."
    },
    "data_region_choice": {
      "answer": "partial",
      "note": "Hosted Coriqo runs in the United States. Self-hosted Coriqo runs where you put it."
    },
    "subprocessors_listed": {
      "answer": "yes",
      "note": "This pack lists them. Every earlier version stays published at coriqo.io/trust/packs/."
    },
    "soc2_type2": {
      "answer": "no",
      "note": "No SOC 2 report yet."
    },
    "iso27001": {
      "answer": "no",
      "note": "No ISO 27001 certificate yet."
    },
    "pen_test_annual": {
      "answer": "no",
      "note": "No independent penetration test yet. The first is planned before 2027-03-31."
    },
    "encryption": {
      "answer": "yes",
      "note": "TLS in transit. Data at rest is on encrypted storage, and every file upload to object storage requests server-side encryption."
    },
    "model_change_notice": {
      "answer": "yes",
      "note": "We give 30 days' notice before changing the AI model Coriqo uses for drafts. AI only drafts: a named person approves anything that enters the record."
    },
    "evaluation_results_shared": {
      "answer": "no",
      "note": "We have not published evaluation results for Coriqo's AI drafting."
    },
    "human_oversight_supported": {
      "answer": "yes",
      "note": "Nothing an AI drafts enters the record until a named person approves it."
    },
    "incident_notice_committed": {
      "answer": "yes",
      "note": "We tell affected customers in writing within 72 hours of confirming a security incident."
    },
    "continuity_tested": {
      "answer": "no",
      "note": "Backups run, and a restore drill exists in code, but we have not yet tested a full recovery plan in production."
    }
  },
  "evidence": [],
  "subprocessors": [
    {
      "name": "Render",
      "role": "Application hosting, the primary Postgres database and the job queue (Redis)",
      "data_seen": "All customer data. Each organization has its own database schema",
      "applies_to": "Hosted Coriqo",
      "region": "United States (Oregon)"
    },
    {
      "name": "Amazon Web Services",
      "role": "File storage (Amazon S3)",
      "data_seen": "Uploaded evidence files and documents Coriqo generates, encrypted at rest",
      "applies_to": "Hosted Coriqo",
      "region": "United States (N. Virginia)"
    },
    {
      "name": "Microsoft Azure",
      "role": "A virtual machine that runs the Evidence Connect connector runtime and the pilot e-signature service",
      "data_seen": "Credentials and raw rows from systems you connect; documents sent for signature, with signers' names and email addresses",
      "applies_to": "Only if you use Evidence Connect or e-signature",
      "region": "United States (East US)"
    },
    {
      "name": "Microsoft Teams (Azure Bot Service)",
      "role": "Relays Teams messages to Coriqo's bot",
      "data_seen": "Message text and metadata, only in channels where your admin turned capture on",
      "applies_to": "Only if Teams capture is on"
    },
    {
      "name": "Anthropic",
      "role": "Language-model calls for drafting and the assistant",
      "data_seen": "Prompt text built from your stored records. Not used for training under Anthropic's commercial terms",
      "applies_to": "Hosted default. You can switch to a model provider inside your own cloud"
    },
    {
      "name": "Voyage AI",
      "role": "Embeddings for document search",
      "data_seen": "Document text split into chunks, and search queries",
      "applies_to": "Hosted default"
    },
    {
      "name": "Mailgun",
      "role": "Email delivery, outbound and inbound",
      "data_seen": "Email addresses and message content, including replies sent to Coriqo",
      "applies_to": "Hosted Coriqo"
    },
    {
      "name": "Namecheap Private Email",
      "role": "Mail server that sends e-signature requests",
      "data_seen": "Signers' names and email addresses, and the request message",
      "applies_to": "Only if you use e-signature"
    },
    {
      "name": "Sentry",
      "role": "Error monitoring",
      "data_seen": "Error details and request metadata from failures. Personal data is not sent by default",
      "applies_to": "Hosted Coriqo"
    },
    {
      "name": "Sigstore Rekor",
      "role": "Public transparency log that anchors each checkpoint",
      "data_seen": "A signed digest of each checkpoint and Coriqo's public key. No record content",
      "applies_to": "All deployments, on by default"
    },
    {
      "name": "DigiCert",
      "role": "Independent time-stamps (RFC 3161) on checkpoints",
      "data_seen": "A hash of each checkpoint. No record content",
      "applies_to": "Hosted Coriqo"
    }
  ],
  "public_key": "+6ptAxA6phRbGuvNqkHrKBgqTFzeM9b9D08GeFeINZk=",
  "signature": "FiCOKnNF/79nUn31vvBO8rfL9uYz+XBX1QQgWP3Ovw9bdEEg5ca2An0vfEUE3WLRFuMGuc3C9g8zE90lVP4UDA=="
}