apokto
Draft — for review before publishing.This is placeholder legal language and has not been reviewed by counsel.

Legal

Cookie Policy

Last updated 30 August 2026

This page explains how the apokto website uses cookies and similar technologies. It covers apokto.co only, not the apokto platform itself.

What cookies are

Cookies are small text files a website stores in your browser to remember information between visits, such as basic preferences or session state.

How this website uses cookies

The apokto website currently sets only cookies that are strictly necessary for it to function correctly — for example, to keep a browsing session secure. We do not currently use advertising cookies, cross-site tracking, or third-party analytics cookies on this site.

  • Strictly necessary — required for basic site functionality and security. These cannot be disabled without affecting how the site works.
  • Analytics or marketing — not currently in use. If we add analytics or marketing cookies in the future, we will update this policy before doing so.

Managing cookies

Most browsers let you block or delete cookies through their settings. Because this site does not rely on optional cookies today, blocking cookies should not affect your ability to browse it.

Changes to this policy

If the cookies this site uses change — for example, if we add analytics — we will update this page and its “last updated” date. See also our Privacy Policy.

Contact

Questions about this policy can be sent to hello@apokto.co.

Questions about this document?

These pages are drafts ahead of legal review. If you need something clarified or want a signed copy for diligence, get in touch.

Contact us

Controls and attestations

SOC 2 Type II
ANNUAL · ON REQUEST
ISO 27001
ISMS CERTIFIED
RFC 3161 timestamping
THIRD-PARTY TSA
WORM object-lock
7-YEAR RETENTION
GDPR · DPA
EU/UK · SUBPROCESSORS
Okta · Entra · Ping
SAML · SCIM
© 2026 APOKTO, INC.SOC 2 TYPE II · ISO 27001 · RFC 3161

Book a briefing

Architecture overview, data-flow diagram and custody specification go to your team before we talk. 45 minutes, on a live deal.

Briefings run 45 minutes on a live deal, not a slide.

Request the security package

SOC 2, ISO 27001, RFC 3161, and the full custody architecture — sent immediately.

Architecture overview, data-flow diagram and custody specification — sent immediately, no call required.