Security as a design principle, written down.
Tocsio is in early access. This page says how it is being built, not which certificates it holds. It holds none yet. Ask us anything on the call.
How the product is built
EU hosting
Customer data is hosted in the European Union by design.
Encryption
TLS for every connection, and incident data encrypted at rest.
Single sign-on
SAML and OpenID Connect sign-on for teams that manage identity centrally.
Audit log
Every configuration change and every notification recorded with who did it and when.
On-premises option
For organisations whose incident data may not leave their own network.
Least privilege
Reading telemetry never grants control; each integration gets the narrowest access that works.
This website
This site sets no cookies and runs no analytics script, and our own pages store nothing on your device: our server counts the pages it serves from the requests themselves. Cloudflare Turnstile runs on the demo page only; as part of its check, its widget keeps data in your browser's storage for its own site (challenges.cloudflare.com), which our pages cannot read. Turnstile tells people from bots on the demo form. Demo requests are stored in the European Union.
Found a security problem on this site? Write to security@tocsio.com. We read every report and reply within two business days.