# Security & Compliance | Kodex

Source: https://www.kodexglobal.com/security-compliance

> Security and compliance for the most sensitive workflow in your company: encryption, audit trails, and access controls built for law enforcement data requests.

Security & compliance

## Controls that match
the stakes.

Subpoenas, warrants, and emergency disclosures, handled with enterprise authentication, encrypted exchange, configurable retention, and a complete audit trail.

Request a demoCheck how security works

### The legal operations teams at the world’s largest crypto exchanges, banks, and telcos handle every law enforcement request through Kodex.

Trusted by

Outcomes

97.5% Fewer law enforcement tickets Coinbase case study → 99.9% Faster law enforcement verification Bitget case study → 99% Of legal request issues resolved Bitfinex case study →

Control layers

### The work is consequential.
The controls have
to match.

The data in Kodex protects people when it’s handled right, and harms them when it isn’t. That’s the standard. Three control layers run continuously.

#### Who’s in the system, what they can do, and how that access changes over time.

Enterprise SSO and centralized access management through your existing identity provider, with automated provisioning, role-based permissions, and granular admin controls that ensure every team sees only what they need.

Permissions

Enterprise SSO Your identity provider · automated provisioning
Verified

Profile & role Access

Legal operations lead Super admin
Full access

Compliance analyst Reviewer
Assigned requests

Security engineer Auditor
Audit log, read only

Contractor Deprovisioned March 26
Access removed

#### How data moves and where it lives.

All data in Kodex is encrypted in transit and at rest, with multi-country data residency and configurable retention policies that keep sensitive information stored, governed, and retained according to your regulatory, contractual, and operational requirements.

Encryption

In transit Encrypted

At rest Encrypted

Retention policies

Data type Residency · retention

Report Subpoena

California, USA 7 years

Production Warrant

Frankfurt, EU 5 years

Request record Emergency disclosure

London, UK 1 year

#### How the work becomes defensible on demand.

Maintain a complete, timestamped audit trail of every action and request, with built-in support for major lawful data access frameworks and audit-ready exports available directly from the platform. No engineering effort required.

Compliance
CalECPA GDPR EU e-Evidence

Data type Generated date

Audit trail Subpoena · KX-31207
March 26, 12:30 PM

Access log All users
March 26, 12:31 PM

Disclosure record Emergency disclosure
March 25, 4:05 PM

Download the audit report

FAQ

### Questions teams
ask before they
sign off.
Request a demo

How is this different from a generic SaaS security posture?

Generic SaaS controls are built for generic data. Kodex is built for data that arrives via subpoena, warrant, and emergency disclosure request. The retention, audit, and access controls match the legal exposure this workflow creates, not a baseline that fits everything.

Where does our data live?

In the jurisdiction your regulators, customers, and contracts require. Kodex supports multi-country data residency, configurable per workflow. Sensitive request data does not travel outside the regions you’ve set.

Who at Kodex can see our data?

Access by Kodex personnel is role-restricted, logged, and limited to support paths your team authorizes. The data your team produces inside Kodex stays under your control.

What happens to our data if we leave?

Retention is configurable per workflow and per jurisdiction. On exit, data follows the retention policy you’ve set. Audit-ready exports are available throughout the relationship.

How do we get a security review with your team?

Talk to security through the CTA below. Our team works directly with your CISO group on questionnaires, attestation review, architecture discussions, and the materials your evaluation requires.