Support Login  |  Contact

Keeping Your Data Safe

In the world of technology, trust is everything. When you use a digital platform, you’re placing confidence in that company’s ability to protect your information. This is a responsibility we take seriously. We believe that robust security isn’t just a feature. It’s the foundation upon which great technology is built. That’s why we’ve dedicated ourselves to creating a secure environment for our users, proven through rigorous certifications and thoughtful product design.

Setting the Standard with Global Certifications

To demonstrate our commitment to security, we undergo audits by independent, third-party organizations. These certifications aren’t just badges. They represent an ongoing effort to meet and exceed global security standards.

SOC 2 Type 2 Certified

We are certified for SOC 2 Type 2. For those unfamiliar, Service Organization Control (SOC) 2 is a comprehensive reporting framework developed by the American Institute of Certified Public Accountants (AICPA). It sets criteria for managing customer data based on five trust service principles: security, availability, processing integrity, confidentiality, and privacy.

A Type 1 report verifies that a company’s systems and controls are designed properly at a single point in time. It confirms we have the right security measures in place. A Type 2 report goes a step further by evaluating the operational effectiveness of those controls over a sustained period, typically six months or longer. Achieving both certifications shows that our security measures are not only well-designed but also consistently effective in practice.

ISO 27001:2022 Certified

In addition to SOC 2, we are also ISO 27001:2022 certified. This is the leading international standard for information security management systems (ISMS). An ISMS is a systematic approach to managing sensitive company information so that it remains secure.

Achieving ISO 27001:2022 certification means we have implemented a comprehensive system to identify, manage, and reduce risks to information security. This framework covers everything from our physical office security to our software development lifecycle, ensuring that security is integrated into all aspects of our operations. It’s another way we take a holistic and proactive approach to protecting your data.

Innovating for a More Private Web

Our dedication to security extends beyond certifications. It directly influences how we build and evolve our products. We actively look for ways to enhance user privacy and reduce potential vulnerabilities, even if it means re-architecting core parts of our platform.

Moving Beyond Browser Cookies

Browser cookies can be useful, but they also present potential privacy risks. Malicious actors can use them to track users across the web without consent or even to facilitate data theft. With growing concerns over data privacy and browsers increasingly restricting cookie usage, we saw an opportunity to make a change.

As of summer 2025, we have completely eliminated the need to set a browser cookie for our product to function. This significant engineering effort means you can use our platform with the peace of mind that comes from disabling cookies in your browser. You get the full benefit of our technology without exposing yourself to the risks associated with third-party tracking, ensuring a more private and secure experience.

AI That Respects Your Privacy

Artificial intelligence is transforming how we learn and work, but it also raises important questions about data privacy. A common concern is how AI models use the data they process. Many organizations are hesitant to use AI with sensitive internal information, fearing it might be used to train public models and inadvertently exposed.

Our AI Score provides powerful, automated feedback on learner-recorded videos. A key principle of this technology is our commitment to data privacy. We’ve engineered a patent-pending process that allows for the evaluation of learner videos against sensitive organizational data without exposing that private information to a public large-language model (LLM).

Crucially, your data is not used to train the AI. The interaction with the LLM is structured as a multi-part conversation designed solely to generate an evaluation for that specific video. The content of your videos and your organization’s proprietary data remain your own. This approach allows you to leverage the power of advanced AI for performance evaluation at scale while safeguarding your most sensitive information.

Security Is Our Promise

For us, security is a continuous journey, not a destination. From achieving internationally recognized certifications to making forward-thinking changes in our product architecture, every decision is made with your security and privacy in mind. We are committed to maintaining a secure, trustworthy platform that empowers you to achieve your goals without compromising your data.

We will continue to innovate and hold ourselves to the highest standards, so you can always have confidence in the technology you use.

Get started verifying real, revenue driving behavior with Bongo