Built to pass your IT and legal review.

    Cognity is engineered around the safeguarding, privacy and compliance bar that schools, districts and ministries set — with controls tuned to each.

    Across the platform

    Encrypted, logged, and never used for training.

    Encryption everywhere

    Data is encrypted in transit and at rest, minimized by default, and never used to train models.

    Data location

    Data is hosted on AWS in Korea by default. Under an enterprise agreement, it can be hosted in another AWS region to meet data-residency requirements.

    Full audit trail

    Every prompt, response, and revision is logged, searchable, and exportable.

    SSO & access control

    Google SSO and enterprise single sign-on, with role-based access.

    For K-12 schools

    Safeguarding first

    Age-appropriate protection, safeguarding workflows, and minimal student data — the bar international K-12 schools review us against.

    Engine-level filtering

    K-12-tuned safety classifiers screen every prompt and response before it reaches a student.

    Safeguarding visibility

    Flagged conversations surface to teachers and the safeguarding team in real time, with full context.

    Student data minimization

    No student email required for instant tasks. Persistent student records exist only on Pro, under school control.

    Education-aligned handling

    PDPO, PIPA, APPI, and UK Age-Appropriate Design Code aligned data handling.

    For universities

    Built into the stack you already run

    A university reviews a different list: where it launches from, who administers it, and what an integrity panel can be shown.

    LTI 1.3 on every plan

    Cognity launches from any LMS that supports LTI 1.3. Rosters come from the LMS rather than a separate import.

    Institutional SSO

    Sign-in with Google or your institution's single sign-on, with role-based access for staff and students.

    Evidence a panel can read

    A misconduct case is shown the session itself — prompts, responses and revisions in order — not a percentage that has to be argued about.

    DPA and data location

    A data processing agreement, AWS hosting in Korea by default with other regions under an enterprise agreement, and student work never used to train models.

    Need our security whitepaper?

    We'll share architecture diagrams, sub-processor lists, and our DPA on request.

    Security questions we are asked most