CoHost1. Security overview
CoHost uses layered controls to protect accounts, event content, payments, and operational data across the platform. Security is treated as part of product design—not an afterthought bolted on later.
- Protect host, guest, and vendor accounts from unauthorized access
- Keep event and payment workflows trustworthy end to end
- Limit who and what can reach production systems
- Respond quickly when issues are reported
2. Encryption in transit and at rest
TLS protects data in transit between your browser and CoHost services.
Sensitive production data is stored with encryption at rest where supported by our infrastructure.
Secrets and credentials are managed separately from application data.
3. Account access and authentication
Password hashes are never stored in plain text.
We support account verification and sign-in protections to reduce unauthorized access.
Administrative access is restricted to the smallest practical set of users and systems.
4. Payments and financial data
Payment processing is handled through third-party payment providers. CoHost stores only the information needed to operate the platform, reconcile transactions, and support billing workflows.
5. Logging, monitoring, and access controls
We monitor application events and security signals for abuse and reliability issues.
Access to production systems is limited and audited.
Operational logs are retained only as long as needed for troubleshooting, security, and compliance.
6. Vulnerability reporting
If you believe you found a security issue, contact us at connect@cohost.com.
Please include enough detail for us to reproduce and assess the issue safely. Do not publicly disclose an active vulnerability before giving us a chance to review it.
7. Privacy policy
Security and privacy work together. Review our Privacy Policy for how we collect, use, and retain personal data.