LAST UPDATED — 20th August 2026
Customer data is hosted on OVHcloud VPS with HTTPS and encryption in transit (TLS) and at rest.
Data is backed up on a daily schedule, with 7 day rolling retainment of records.
Coda supports per-entity, per-project and per-discipline permissions, role-based access, and Microsoft 365 SSO for user authentication.
Sign-offs are signed to the PAdES (PDF Advanced Electronic Signatures) standard, binding each signature cryptographically to the signed record.
Every edit, approval, sign-off and upload is logged with the acting user and timestamp.
If you believe you've found a security issue, contact hello@codacompletions.com.