Your data, looked after
You are trusting Coregate Solutions with your training, your spending and your diary. Here is exactly how that is protected.
Encrypted everywhere
TLS 1.3 in transit and AES-256 at rest, covering the database, file storage and backups.
Two-factor available
Add a second step with any authenticator app, and see or sign out of every logged-in device.
Hosted in Singapore
Your data sits in Singapore by default and does not leave the region except for aggregate, non-identifying diagnostics.
Backed up, tested
Encrypted backups every six hours with 35-day point-in-time recovery. Restores are tested quarterly, not assumed.
Always exportable
Everything you enter can be downloaded in open formats at any time, including after you cancel.
Breaches disclosed
If a notifiable data breach affects you we tell you and Singapore's PDPC within 3 calendar days of assessing it, as the PDPA requires.
Things you can do
- Use a long, unique password — a passphrase beats a short complicated one
- Switch on two-factor authentication in Account → Security
- Review your signed-in devices occasionally and sign out anything you do not recognise
- Be suspicious of any email asking for your password — we will never ask for it