TRUST CENTER
Trust documents in one place.
A single public hub for the policies, controls, and operating signals teams need before they describe their app to Kozo and ship the schema it generates.
LAST UPDATED - JUNE 23, 2026
SOC 2
In progress
Control mapping and evidence collection
PRIVACY
No training
Prompts and schemas are not used to train models
STATUS
Public
Operational summary available at /status
PROGRAM
Trust pillars
Kozo separates trust into clear surfaces: security controls, privacy commitments, reliability status, and legal documentation.
Security posture
Controls for encryption, per-account isolation, key separation, least privilege, and secure API boundaries.
Privacy and data rights
Plain-English privacy commitments, data retention, export, deletion, and third-party processing.
Reliability
Public availability signal for the web app, schema generation, authentication, and database.
Legal readiness
Terms, DPA, acceptable use, cookie policy, and sub-processor documentation.
COMPLIANCE
Current posture
These signals describe the public program stage. Enterprise-specific reviews can be handled through the contact path.
IN PROGRESS
SOC 2 Type II
Controls are being mapped and evidence is being collected. A completed audit report is not currently published.
GDPR READY
Privacy alignment
Policies are structured around access, export, deletion, sub-processor transparency, and data minimization.
NO TRAINING
Data handling
Prompts and generated schemas are scoped to your account, encrypted at rest, and never used to train models or sold to third parties.
DOCUMENTS