Trust & Security · Columa
Columa answers your calls, books your jobs, and captures your leads. That means your data — and your customers' — is in our care. We treat protecting it as core to the product, not an afterthought.
How we protect you · 01
Every connection to Columa is protected with modern TLS, with a TLS 1.2 minimum enforced at the edge — legacy protocols are refused outright. HTTP Strict Transport Security (HSTS) tells browsers to connect securely from the very first request. Data moving between your customers, your site, and Columa is never sent in the clear.
Card payments run through Stripe, a PCI-DSS Level 1 provider — the highest tier. Columa never sees or stores your full card number.
Columa runs behind Cloudflare's network, which absorbs denial-of-service attacks and filters automated bots before they ever reach the service.
Access to features and data is scoped and verified on our servers, so every account reaches only what it is entitled to — never more.
Connections to third-party tools use industry-standard OAuth, and sensitive access keys — including the AI keys that power Olive — stay encrypted on Columa's servers, never on your site or in a browser.
Public forms and the chat assistant are guarded with bot detection and rate limiting, so junk traffic is turned away and your real leads come through clean.
Staying ahead · 02
We regularly review our own code and infrastructure — including adversarial testing of our public endpoints — and fix what we find. Software is never "done," so neither is this work. Recent hardening includes enforcing a TLS 1.2 protocol floor and strict transport security (HSTS) across Columa domains.
Responsible disclosure
If you believe you've discovered a security issue in Columa, please tell us before disclosing it publicly. We investigate every good-faith report and will keep you updated on our progress.
We aim to acknowledge good-faith reports promptly. Please include steps to reproduce and your contact details.
Last reviewed · July 2026
Trust, built in
Columa is built and backed by a team that runs real businesses — so we hold your data to the standard we'd want for our own. Questions about our security or privacy practices? We're glad to answer.
An Olive Group product