01

Trust center

Security at Cognisync

Last updated October 2026

02

How we handle your data

We access client systems and data only as a project requires, use encrypted connections, and remove access when an engagement ends.

Engineering practices

Code is version-controlled and peer-reviewed, secrets are kept out of source code, and dependencies are kept up to date.

Responsible disclosure

Found a vulnerability in something we built or run? Email info@cognisync.co.ke with details. We respond within two business days and never take legal action against good-faith research.