Credentials
Everything that backs the platform.
One page that aggregates every trust signal — security details, attorney review, certifications, customer ratings, and the principles we hold ourselves to.
Most platforms make this hard to find on purpose. Vague claims about “bank-level security” and “attorney-built” are easier to write than verifiable specifics. We prefer the specifics. Where we're still working toward something, we say so.
Certifications & posture
What's live, what's in flight.
AWS KMS field-level encryption
LiveAES-256-GCM with envelope encryption. Per-environment Customer Master Key with rotation enabled.
TLS 1.3 + HSTS preload
LiveAll traffic encrypted in transit. HSTS preloaded for 2 years with includeSubDomains.
Append-only audit log
LiveEvery meaningful action recorded with no UPDATE/DELETE path in application code.
Per-state attorney review
LiveEach state's template reviewed by a licensed estate-planning attorney in that state.
Pledge 1% commitment
Public commitment1% of profits, time, and product dedicated to estate-planning access for underserved communities.
SOC 2 Type 1
In progressAudit kicks off Q2 2026 with continuous-monitoring tooling already wired in.
BBB accreditation
PendingApplication submitted; A+ rating expected after standard operating period.
B Corporation
In processInitial assessment complete; full audit cycle is 6-12 months. Targeting 2027 certification.
SOC 2 Type 2
Planned 2027Follows Type 1 by ~12 months. Verifies controls operated correctly over a sustained window.
Trustpilot integration
PendingTrustpilot business account in setup; review collection begins at first paying customer.
Attorney review
Who reviews each state.
Attorney review
Each state's template is reviewed by a licensed estate-planning attorney in that state. Currently engaged for 3 states: California, New York, Texas. Reviewer credentials (name + bar ID + review year) will be published here at public launch.
Customer numbers
What real users are saying.
If both sections above are empty, we're pre-launch. Numbers and reviews appear once we've crossed the thresholds (100+ customers; 25+ verified reviews) — never backfilled with placeholders.
Where to dig deeper
More detail.
Security in depth →
The technical specifics: encryption, audit logging, vendor attestations, data lifecycle, vulnerability reporting.
Principles + Pledge 1% →
What we hold ourselves to and the public commitment we've made on giving back.
Privacy policy →
What data we collect, how we use it, who we share with, your deletion rights.
Press & media kit →
Brand assets, fact sheet, media inquiries, partnership inquiries.
Verifiable beats vague.
Every claim on this page links to specifics. If we ever say something here that doesn't survive scrutiny, please tell us at security@cocreateidea.com — we'll fix it the same day.