# Security and Compliance

- [How does Cosine support enterprise security and compliance?](/faqs/security-and-compliance/how-does-cosine-support-enterprise-security-and-compliance.md): Cosine aligns with SOC 2, ISO 27001, GDPR, and CCPA standards. It offers audit logging, data residency controls, and private or on-prem deployments to meet enterprise compliance requirements.
- [Where does Cosine run?](/faqs/security-and-compliance/where-does-cosine-run.md): Cosine runs anywhere your organisation needs — from fully managed Cosine Cloud to private VPC or on-premise, air-gapped deployments — meeting enterprise security and compliance requirements.
- [How does Cosine handle security, privacy, and IP?](/faqs/security-and-compliance/how-does-cosine-handle-security-privacy-and-ip.md): Cosine is built for enterprise-grade security — protecting your source code, data, and IP through encryption, data isolation, RBAC, SSO, and zero-trust network controls across all deployments.
- [Is Cosine SOC 2 / ISO 27001 compliant?](/faqs/security-and-compliance/is-cosine-soc-2-iso-27001-compliant.md): Cosine is built for enterprise-grade security — protecting your source code, data, and IP through encryption, data isolation, RBAC, SSO, and zero-trust network controls across all deployments.
- [Does Cosine store code or PII? Can we opt out of training?](/faqs/security-and-compliance/does-cosine-store-code-or-pii-can-we-opt-out-of-training.md): Cosine aligns with SOC 2 and ISO 27001 standards, supporting secure deployments for regulated industries with strict data governance requirements.
