ComplyBora
Certification status: working toward SOC 2. ComplyBora does not hold a SOC 2 certification and has no independent audit report.
In place today
- HTTPS delivery through Firebase Hosting.
- Content Security Policy and other security headers on every page.
- No advertising trackers or analytics. The tracker and checklist tools keep data in your own browser.
- Deny-by-default Firestore rules: only specifically allowed access is permitted.
Not yet in place
- An independent SOC 2 audit and report.
- Formal documented security policies and vendor reviews.
- Accounts, credential uploads and ComplyBora Connect. They are not live, and this page will describe their controls when they are.
SOC 2 badge: disabled (draft)
Shown only when certification is obtained and approved for publication. Setting soc2Badge to true in build/flags.json requires the certification date, auditor and report reference.
Security contact
info.complybora@gmail.com. ComplyBora is an independent educational platform, not a government agency.