Data hosting
Customer data is hosted on OVHcloud VPS with HTTPS and encryption in transit (TLS) and at rest.
Backups
Data is backed up on a daily schedule, with 7 day rolling retainment of records.
Access control
Coda supports per-entity, per-project and per-discipline permissions, role-based access, and Microsoft 365 SSO for user authentication.
Digital signatures
Sign-offs are signed to the PAdES (PDF Advanced Electronic Signatures) standard, binding each signature cryptographically to the signed record.
Audit trail
Every edit, approval, sign-off and upload is logged with the acting user and timestamp.
Reporting a security concern
If you believe you’ve found a security issue, contact hello@codacompletions.com.