Security

Your relationships, protected

Cordo connects to your email and your most important relationships. We treat that access with the care it deserves.

Your inbox stays private

Connecting your mailbox does not publish it. Incoming email is visible only to you and your admins until you choose to share it with a campaign. One teammate never sees another’s private inbox.

Tokens encrypted at rest

The access tokens that let Cordo work with your email are encrypted at rest with AES-256, so they are never stored in plain text.

Access you control

Campaigns can be company-wide or scoped to specific people. A scoped relationship is invisible to everyone outside it, enforced at the database layer, not just hidden in the interface.

Limited use of Google data

Cordo’s use of information from Google APIs follows Google’s Limited Use requirements. We use it only to provide the features you turn on, and never to train general models or sell data.

Tenant isolation

Every organisation’s data is isolated with row-level security. Your workspace can only ever see its own contacts, campaigns and messages.

Built on trusted infrastructure

Cordo runs on modern, reputable cloud infrastructure with encryption in transit and managed, access-controlled data storage.

Questions about data and compliance

If you are evaluating Cordo for your team and need details on data handling, sub-processors, or data residency, we are happy to walk through it. Get in touch and we will share what you need.