Security
Last updated: April 2026
Security Principles
CoVise is designed around layered security controls intended to protect user accounts, platform availability, and sensitive venture information. We continuously review our controls as the product evolves.
Infrastructure Protection
We use managed hosting and cloud services with network-level protections, encrypted transport, and environment separation to reduce exposure. Administrative services are restricted to authorized personnel only.
Data Protection
Data is protected in transit using HTTPS. We apply encryption and secure storage practices for platform data, uploaded files, and credentials, and we limit retention where practical.
Access Controls
Internal access is granted on a least-privilege basis. Sensitive actions are limited to authorized team members, and account access is reviewed as roles change.
Monitoring and Response
We monitor the platform for suspicious activity, service degradation, and operational issues. When needed, we investigate incidents, contain risk, and take corrective action as quickly as possible.
User Responsibilities
Users should protect their passwords, avoid sharing account access, and report suspicious behavior promptly. Strong passwords and careful handling of shared venture information remain important parts of account security.
Reporting a Concern
If you believe you have found a vulnerability or security issue, contact us at support@covise.net. Include as much detail as possible so we can investigate quickly.