Your data, handled with real care
We handle sensitive customer data every day: phone numbers, addresses, and conversations. Here's how we protect it, what we collect, and where our compliance work actually stands, in plain language.
Last reviewed: October 14, 2026
The controls behind every account
Encryption, access, data handling, and infrastructure — the four things that keep your customers' data safe.
Where we actually stand
We label what's in place and what's still in progress. No badges we haven't earned.
GDPR
Ask for a copy of your data, a correction, an export, or deletion, and our team handles it. Our privacy policy says what we collect, why, and how long we keep it.
CCPA
California residents get the same controls: access, export, and deletion of personal information, and a hard rule that we never sell customer data.
Security review and NDA
Mosco is not SOC 2 certified, and we won't pretend otherwise. Reviewing us for a deal? We'll answer your security questionnaire, walk you through where your data goes, and sign an NDA before you share anything sensitive.
Internal security reviews
Our team reviews our own code and setup for security issues and fixes what we find. We have not had an outside penetration test yet, and we'll say so here when we do.
What we collect, and who touches it
The short version of our data practices. The full detail lives in the privacy policy.
Security, asked plainly
Still have a question? Email security@mosco.ai.
Have a security question?
Reporting an issue, reviewing us for a deal, or just want the details? Email security@mosco.ai and a real person will get back to you.