Security & compliance

Controls that match
the stakes.

Subpoenas, warrants, and emergency disclosures, handled with enterprise authentication, encrypted exchange, configurable retention, and a complete audit trail.

Request a demo Check how security works

SecurityEncrypted in transit and at rest

AuthenticationEnterprise SSO

ExchangeEncrypted

RetentionConfigurable

Audit trailComplete

Encrypted3 requests

KX-31207

SubpoenaCounty sheriff’s office

Verified

KX-31198

Emergency disclosureFederal agency

In review

KX-31185

WarrantState police

Responded

Audit trailSubpoena · KX-31207

Report requestedMarch 26, 12:24 PM

Request verifiedMarch 26, 12:27 PM

Report reviewedMarch 26, 12:30 PM

Download the audit report

The legal operations teams at the world’s largest crypto exchanges, banks, and telcos handle every law enforcement request through Kodex.

Trusted by

Outcomes

97.5%Fewer law enforcement ticketsCoinbase case study →99.9%Faster law enforcement verificationBitget case study →99%Of legal request issues resolvedBitfinex case study →

Control layers

The work is consequential.
The controls have
to match.

The data in Kodex protects people when it’s handled right, and harms them when it isn’t. That’s the standard. Three control layers run continuously.

Who’s in the system, what they can do, and how that access changes over time.

Enterprise SSO and centralized access management through your existing identity provider, with automated provisioning, role-based permissions, and granular admin controls that ensure every team sees only what they need.

Permissions

Enterprise SSOYour identity provider · automated provisioning

Verified

Profile & roleAccess

Legal operations leadSuper admin

Full access

Compliance analystReviewer

Assigned requests

Security engineerAuditor

Audit log, read only

ContractorDeprovisioned March 26

Access removed

How data moves and where it lives.

All data in Kodex is encrypted in transit and at rest, with multi-country data residency and configurable retention policies that keep sensitive information stored, governed, and retained according to your regulatory, contractual, and operational requirements.

Encryption

In transitEncrypted

At restEncrypted

Retention policies Enabled

Data typeResidency · retention

ReportSubpoena

California, USA7 years

ProductionWarrant

Frankfurt, EU5 years

Request recordEmergency disclosure

London, UK1 year

How the work becomes defensible on demand.

Maintain a complete, timestamped audit trail of every action and request, with built-in support for major lawful data access frameworks and audit-ready exports available directly from the platform. No engineering effort required.

Compliance

CalECPAGDPREU e-Evidence

Data typeGenerated date

Audit trailSubpoena · KX-31207

March 26, 12:30 PM

Access logAll users

March 26, 12:31 PM

Disclosure recordEmergency disclosure

March 25, 4:05 PM

Download the audit report

FAQ

Questions teams
ask before they
sign off.

Request a demo

How is this different from a generic SaaS security posture?

Generic SaaS controls are built for generic data. Kodex is built for data that arrives via subpoena, warrant, and emergency disclosure request. The retention, audit, and access controls match the legal exposure this workflow creates, not a baseline that fits everything.

Where does our data live?

In the jurisdiction your regulators, customers, and contracts require. Kodex supports multi-country data residency, configurable per workflow. Sensitive request data does not travel outside the regions you’ve set.

Who at Kodex can see our data?

Access by Kodex personnel is role-restricted, logged, and limited to support paths your team authorizes. The data your team produces inside Kodex stays under your control.

What happens to our data if we leave?

Retention is configurable per workflow and per jurisdiction. On exit, data follows the retention policy you’ve set. Audit-ready exports are available throughout the relationship.

How do we get a security review with your team?

Talk to security through the CTA below. Our team works directly with your CISO group on questionnaires, attestation review, architecture discussions, and the materials your evaluation requires.

Security & compliance

Defensible to
the people
who matter.

The CISO. The regulator. The board. The auditor reviewing the response to a SAR. The journalist asking how the data was handled. The standard isn’t a checkbox on a procurement form. It’s whether the work holds up when someone consequential looks at it.

Kodex is built to hold up.

Request a demo See kodex integrations

Controls that match the stakes.