Security, Privacy, and Compliance
CometChat is SOC 2 Type II audited and ISO/IEC 27001 certified. We sign a HIPAA Business Associate Agreement on the Advanced plan and above, and host data in the US, EU or India.
Fully compliant
Advanced encryption
AES-256
Data at rest is encrypted with AES-256 on AWS, with access restricted to authorized personnel. An independent third party performs a penetration test every year.
TLS 1.2+
Your data and all communication within CometChat are encrypted in transit with TLS 1.2 or higher.
Request our security reports
Email compliance@cometchat.com for the SOC 2 Type II report or the ISO/IEC 27001 certificate.
Let's map out how CometChat works for you.
30 minutes. Real answers. A plan you can actually act on.
Pick a time that works, talk to someone who knows the product.
Your use case shapes the call - no guessing, no repeating yourself.
No commitment. Just a straight conversation about how this fits - and if it doesn't, we'll say so.
Trusted by teams building conversations at scale.