Trust & Security Center

Your recordings
stay yours.

Every file is encrypted, private to your account and never sold. Here's how we protect what you upload, and where our compliance work stands.

Quick answer

Is Cockatoo safe and private?

Yes. Cockatoo is a secure transcription service that keeps your recordings private. Files and transcripts are encrypted in transit and at rest, stay private to your account unless you share them, and are stored in the United States. We earn money from subscriptions only, never from ads or selling data. You can export or delete your files at any time.

Compliance

Where our compliance work stands

Three programs are underway. This is where each one stands today.

Audit in progress

Independent security audit

An auditor is testing how our security controls work over time. We'll share the SOC 2 Type II report on request once it's issued.

In progress

EU data protection

You can already access, export, correct and delete your data. Transfers outside the EEA use Standard Contractual Clauses.

In progress

US health data

We're putting HIPAA safeguards in place. Business Associate Agreements will be available once the program is complete.

Privacy

We sell software.
Never your data.

Cockatoo is independently owned and paid for by subscriptions, never by advertising or data licensing. No one is pushing us to monetize your recordings.

  • Never sold or shared with advertisers
  • Private until you choose to share it
  • Encrypted in transit and at rest
  • Independently owned, with no outside investors
Security practices

How we protect your files

The practical details behind the promises above.

Encrypted in transit and at rest

Files and transcripts are protected with industry-standard encryption while they move and while they're stored.

Stored in the United States

We store and process data in the US. Transfers from the EEA use Standard Contractual Clauses.

Private by default

Only you can open your files until you share them, with a link or with set permissions for each team member.

Deleted when you say so

Delete any file whenever you want. Close your account and we delete your personal information within 30 days.

Payments through Stripe

Payments are processed by Stripe, a PCI DSS Level 1 certified provider.

Team workspaces

On Team plans, your workspace admin can manage accounts and the content in them.

Copies on request

Ask for your data in a machine-readable format, or ask us to correct or restrict it.

Policies and documents

Read how we handle your data, or ask for the documents your team needs.

Security questions

Straight answers about how we handle your recordings.

Yes. Files and transcripts are encrypted in transit and at rest, and they stay private to your account unless you share them. We never sell your data or show ads.

Ask anything else

Start transcribing

Drop a file and see the results for yourself. No account, no card, no waiting.

Get started