How your data is kept safe
Cosmentum holds the thing an agency cannot lose: every client, what each one pays, and notes nobody outside the business should read. Here is exactly what protects it. Every claim on this page is specific and checkable, because "bank-level encryption" is what gets written when there is nothing to point at.
One workspace cannot see another
Every record carries the id of the workspace it belongs to, and every screen reaches data through a single gate that asks who is asking.
Each release runs a test that signs in as a customer and tries to open screens that read across all workspaces. If it ever succeeds, the release stops.
Signing in
Passwords are hashed with scrypt. We cannot tell you yours because we do not have it. Sessions are 32 random bytes and httpOnly.
One live session per seat, so a shared login becomes visible rather than silent. Ten wrong passwords lock that seat for 15 minutes.
Invitation and reset links are stored hashed, work once, and expire: a week for invitations, an hour for resets.
When support opens your workspace
A reason is written down before the door opens. You can read every visit in your own settings, and we cannot delete that record. Nothing is done under your name, and the visit expires by itself after an hour.
Where it lives
Managed PostgreSQL in New York, closed to the public internet. It accepts the application and one named address, nothing else.
If something is lost
Two independent copies: seven days of point-in-time recovery at the host, plus encrypted backups held with a different provider entirely, so losing one account cannot lose both.
Every backup is downloaded, decrypted and counted against the live database before it is called a backup. Restore has been rehearsed: 1,032 rows across every table back in 13 seconds.
What leaves the building
Error reports are stripped of names, emails, search terms and tokens. One cookie, to keep you signed in. No tracking, which is why there is no cookie banner.
Google Drive access is limited to folders the app created itself.
Your data on the way out
Download the whole workspace as spreadsheets any time. Leave, and it stays readable for 30 days, then is deleted in full. Tested at 742 rows across 31 tables, nothing left.
How changes reach you
Over 170 automated checks run before anything ships. Every schema change is rehearsed against a real copy of the live database first. Deploys are verified across every server rather than assumed.
The gaps, so you can weigh them
- No third-party audit or SOC 2.
- No uptime guarantee.
- No two-factor authentication yet.
- No payment details held at all. There are no card numbers in Cosmentum to lose.
The technical page lives beside the code it describes, so it stays current as the product changes.