Security
Secure your data at every layer
Collavate is audited and certified by the industry’s leading third-party standards.
Enterprise-grade data security

Google CASA (Cloud App Security Assessment)
Collavate has completed rigorous certification under Google’s Cloud App Security Assessment (CASA) standards.

ISO 9001:2015
Collavate is fully compliant with ISO 9001, the global benchmark for quality management.

GDPR (EU General Data Protection Regulation)
Collavate provides per-file GDPR risk-rating tools and processes to ensure full compliance with GDPR requirements.

HIPAA (Health Insurance Portability and Accountability Act)
Collavate complies with the HIPAA Privacy Rule and is architected to meet its requirement for applicable customers.

CCPA (California Consumer Privacy Act)
Collavate complies with the CCPA, meeting its requirements for all eligible customers.

Trusted Data Security
All files processed by Collavate are handled by Google, and we don’t store any customer data from your approval workflows.
Our security policies and protocols
Terms of Service
Describes the terms applicable to using Collavate and the user’s rights and responsibilities.
Privacy Policy
Explains the policies for collecting, using, storing, and protecting user personal data.
Collavate AI Terms
Explains the principles and policies for collecting, using, and protecting data processed by our AI.
Asset Management Policy
Defines our cloud data protocols, storage, and archiving practises.
Business Continuity and Disaster Recovery
Describes our procedures that ensure service continuity during unexpected outages or crises.
Physical and Environmental Security Policy
Outlines physical access controls and environmental risk measures for data centers and workplaces.
Governance Policy
Describes the functions of our compliance team to ensure transparent operations.
Collavate Security Whitepaper
Outlines our internal security measures and how they benefit platform users.