Legal
Security
Last updated: August 1, 2025
CovenantIQ is built from the ground up to handle sensitive financial data. We've achieved SOC 2 Type II certification through independent audit by Prescient Assurance — covering security, availability, and confidentiality controls across every layer of the platform.
Security Certifications

CovenantIQ is certified SOC 2 Type II by independent audit and assessment by Prescient Assurance.
Hosting
CovenantIQ is hosted in the United States on Amazon Web Services (AWS), a provider with a proven track record for physical security and internal controls.
Encryption
CovenantIQ offers end-to-end encryption to secure the entire online experience. Data is encrypted at rest, in process, and in transit.
Security Controls
Our Compliance Manager oversees our data protection practices, which include measures such as penetration testing, employee background checks, and regular security audits.
Admin Controls
Admin users of CovenantIQ scope the access of other account users to data in CovenantIQ. Admins can also track user access and review activity in an audit log.
Contact Us
For security questions or to report a concern, please contact support@covenantiq.io.