Our Commitment to Data Security

Last Updated: May 14, 2025

At Coadvocate.ai, we understand the highly sensitive nature of the information you entrust to us. Coparenting communications, legal documents, and personal details require the utmost protection. This Data Security Statement outlines the measures we take to safeguard your data and maintain your trust.

1. Comprehensive Security Framework

We have implemented a multi-layered security framework based on industry best practices and designed to protect your data at every stage – in transit, at rest, and during processing. Our approach encompasses technical, administrative, and physical safeguards.

2. Data Encryption

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using strong TLS (Transport Layer Security) protocols (e.g., TLS 1.2 or higher) to prevent eavesdropping or interception.
• Encryption at Rest: Sensitive data stored on our servers, including your communications, personal information, and parenting plan details, is encrypted using industry-standard encryption algorithms such as AES-256.

3. Access Controls and Authentication

• Strong Authentication: We require strong, unique passwords for user accounts and may offer multi-factor authentication (MFA) for an added layer of security.
• Principle of Least Privilege: Access to sensitive data by Coadvocate.ai personnel is strictly limited based on job responsibilities (role-based access control). Employees only have access to the data necessary to perform their duties.
• Audit Trails: We maintain detailed audit logs of access to sensitive systems and data to monitor for unauthorized activity.

4. Secure Infrastructure and Development

• Secure Cloud Hosting: Our platform is hosted on reputable cloud infrastructure providers (e.g., AWS, Google Cloud, Azure) that maintain high standards of physical and network security, and comply with certifications like SOC 2, ISO 27001.
• Regular Security Assessments: We conduct regular vulnerability assessments and penetration testing (both internal and by third-party security experts) to identify and remediate potential security weaknesses.
• Secure Software Development Lifecycle (SSDLC): Security is integrated into every phase of our software development process, including secure coding practices, code reviews, and automated security testing.

5. Data Minimization and Retention

We only collect and retain personal information that is necessary to provide and improve our services, as outlined in our Privacy Policy. We have policies in place for the secure deletion of data when it is no longer needed or upon user request, in accordance with applicable laws.

6. Incident Response Plan

In the event of a security incident, we have a documented incident response plan to promptly investigate, contain, mitigate, and remediate the impact. We are committed to notifying affected users and relevant authorities as required by law in the event of a data breach involving personal information.

7. Employee Training and Awareness

All Coadvocate.ai employees undergo regular data security and privacy training to ensure they understand their responsibilities in protecting user data. Confidentiality agreements are in place with all personnel.

8. Compliance and Regulations

We are committed to complying with applicable data protection laws and regulations, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). Our Privacy Policy provides detailed information on how we handle personal data in accordance with these regulations.

9. Your Role in Security

While we take extensive measures to protect your data, you also play a crucial role in maintaining security. We encourage you to:

• Use strong, unique passwords for your Coadvocate.ai account.
• Keep your login credentials confidential.
• Be cautious of phishing attempts or suspicious communications.
• Ensure your own devices and networks are secure.
• Notify us immediately if you suspect any unauthorized access to your account.

10. Continuous Improvement

The security landscape is constantly evolving. We are committed to continuously reviewing and updating our security practices to address emerging threats and incorporate new technologies and best practices.

11. Questions and Reporting Concerns

If you have any questions about our data security practices or wish to report a security concern, please contact us immediately at security@coadvocate.ai or visit our Contact Page.

Your trust is paramount to us, and we are dedicated to protecting the confidentiality, integrity, and availability of your information.