# Cognee

Graph-based memory platform

Research: https://www.safecli.org/company/cognee.ai
Company: https://cognee.ai

## Evidence status

Insufficient enterprise evidence
Source review: 2026-10-16T03:30:20.089Z
API: Public API

Company-published claims, not independently verified controls. Unknown is not evidence of absence.

## Procurement checks

### Security assurance — Needs clarification

> | There is no SOC 2 or ISO 27001 certification yet.

Source: https://docs.cognee.ai/cognee-cloud/functionality/data-and-security
Reviewed: 2026-10-16T03:30:20.089Z

> We do not currently hold SOC 2, ISO 27001, or an equivalent third-party

Source: https://docs.cognee.ai/cognee-cloud/functionality/data-and-security
Reviewed: 2026-10-16T03:30:20.089Z

- [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### SSO & provisioning — Not found


- [ ] Test SSO enforcement, user removal and privileged-account recovery.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Access controls — Company-published

> Tenant isolation — your data is physically separate

Source: https://docs.cognee.ai/cognee-cloud/functionality/data-and-security
Reviewed: 2026-10-16T03:30:20.089Z

> The controls described above — physical tenant isolation, encryption in transit

Source: https://docs.cognee.ai/cognee-cloud/functionality/data-and-security
Reviewed: 2026-10-16T03:30:20.089Z

- [ ] Test least-privilege roles and cross-tenant access with separate test accounts.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Auditability — Not found


- [ ] Verify administrative and data-access events, retention and export.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Data handling — Mixed claims — review

> For the AWS region of your workspace, or if you need data residency guarantees, email social@cognee.ai.

Source: https://docs.cognee.ai/cognee-cloud/functionality/data-and-security
Reviewed: 2026-10-16T03:30:20.089Z

> For a signed DPA or more detail on our controls, email social@cognee.ai.

Source: https://docs.cognee.ai/cognee-cloud/functionality/data-and-security
Reviewed: 2026-10-16T03:30:20.089Z

> | Can I get a DPA or a certification report?

Source: https://docs.cognee.ai/cognee-cloud/functionality/data-and-security
Reviewed: 2026-10-16T03:30:20.089Z

> 28 GDPR, including a dedicated sub-processor list agreed between the customer and Cognee in the DPA, and is not detailed further in this notice.

Source: https://www.cognee.ai/privacy-notice
Reviewed: 2026-10-16T03:30:20.089Z

- [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Reliability & support — Not found


- [ ] Request SLA, incident history, recovery targets and support escalation terms.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Product effectiveness — Company-published

> cold start 0 faster recall 0 on-device 0

Source: https://www.cognee.ai/product/enterprise
Reviewed: 2026-10-16T03:30:20.089Z

> Learn how to connect Slack, GitHub, Linear to Cognee and help agents recall what your company knows in a 1h webinar.

Source: https://www.cognee.ai/product/enterprise
Reviewed: 2026-10-16T03:30:20.089Z

- [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

## Decision

- Owner:
- Intended use and data sensitivity:
- Blocking requirements:
- Pilot success criteria:
- Unresolved risks:
- Decision and review date: