Independent security audit
An auditor is testing how our security controls work over time. We'll share the SOC 2 Type II report on request once it's issued.
Every file is encrypted, private to your account and never sold. Here's how we protect what you upload, and where our compliance work stands.
Yes. Cockatoo is a secure transcription service that keeps your recordings private. Files and transcripts are encrypted in transit and at rest, stay private to your account unless you share them, and are stored in the United States. We earn money from subscriptions only, never from ads or selling data. You can export or delete your files at any time.
Three programs are underway. This is where each one stands today.
An auditor is testing how our security controls work over time. We'll share the SOC 2 Type II report on request once it's issued.
You can already access, export, correct and delete your data. Transfers outside the EEA use Standard Contractual Clauses.
We're putting HIPAA safeguards in place. Business Associate Agreements will be available once the program is complete.
Cockatoo is independently owned and paid for by subscriptions, never by advertising or data licensing. No one is pushing us to monetize your recordings.
The practical details behind the promises above.
Files and transcripts are protected with industry-standard encryption while they move and while they're stored.
We store and process data in the US. Transfers from the EEA use Standard Contractual Clauses.
Only you can open your files until you share them, with a link or with set permissions for each team member.
Delete any file whenever you want. Close your account and we delete your personal information within 30 days.
Payments are processed by Stripe, a PCI DSS Level 1 certified provider.
On Team plans, your workspace admin can manage accounts and the content in them.
Ask for your data in a machine-readable format, or ask us to correct or restrict it.
Read how we handle your data, or ask for the documents your team needs.
Straight answers about how we handle your recordings.
Yes. Files and transcripts are encrypted in transit and at rest, and they stay private to your account unless you share them. We never sell your data or show ads.
Our GDPR compliance work is in progress. You can already access, export, correct and delete your data. Transfers outside the EEA use Standard Contractual Clauses. Contact us to request a Data Processing Agreement.
Our SOC 2 Type II audit is in progress. An independent auditor is testing our security controls over time. The report will be available on request once it's issued.
Our HIPAA program is in progress. Business Associate Agreements will be available once the program is complete. Contact us to discuss your requirements before uploading protected health information.
Your recordings are encrypted in transit and at rest, and remain private to your account unless you share them. If your interviews have specific confidentiality or compliance requirements, contact us to discuss them before uploading.
You can delete files from your account at any time. When you close your account, we delete your personal information within 30 days. Contact support@cockatoo.com if you need help with a deletion request.
Drop a file and see the results for yourself. No account, no card, no waiting.
Get started