---
title: 'Cosmos Video: Security and Access Controls'
description: 'Enterprise-grade security for Cosmos Video virtual office — SOC 2 Type II, SSO, encryption, role-based permissions, and GDPR compliance for companies, schools, and community organisations.'
url: '/product/features/security-and-access.md'
lastModified: '2026-04-21'
contentType: 'Feature Page'
keywords: ['cosmos video security', 'virtual office SSO', 'SOC 2 virtual office', 'encrypted video conferencing', 'GDPR video collaboration']
target_audience: 'IT admins, security and compliance leads, procurement, remote team admins, schools, community org admins'
---

# Cosmos Video: Security and Access Controls

Cosmos Video protects virtual office spaces with SOC 2 Type II attestation, GDPR compliance, end-to-end encryption, single sign-on, and role-based access controls. The feature set is aimed at companies, schools, and community organisations that need verifiable security posture before deploying a persistent virtual workspace.

Administrators manage access through a role-based permission system with three tiers (Owner, Admin, Member) plus guest access that can be scoped per room or per space. SSO is available through SAML 2.0, Google Workspace, and Microsoft 365. Two-factor authentication is available on all plans. All media streams are encrypted in transit and at rest. The full set of security reports, sub-processors, and compliance documentation is published at [security.cosmos.video](https://security.cosmos.video) for procurement review without NDA.

## What compliance frameworks does Cosmos Video meet?

Cosmos Video is SOC 2 Type II attested and GDPR compliant. The full trust profile — including sub-processors, data residency, incident history, and pen-test summaries — is published on the Cosmos Video trust centre at security.cosmos.video.

## How are users authenticated?

Cosmos Video supports SAML 2.0 single sign-on, Google Workspace SSO, Microsoft 365 SSO, and email + password with optional two-factor authentication. SSO is available on the Team and Business plans. IT admins can enforce SSO-only sign-in at the org level.

## What permission levels does Cosmos Video offer?

Three role tiers inside a space: **Owner** (full control, billing), **Admin** (manage members and rooms), and **Member** (standard collaborator). Guests can be invited per-room with expiring links that do not require an account.

## How is meeting data encrypted?

Video, audio, screen share, and chat streams are encrypted in transit using DTLS-SRTP for media and TLS 1.2+ for signalling. At-rest recording data is encrypted with AES-256 in Cosmos Video's storage layer. EU customers can request EU data residency.

## Frequently Asked Questions

### Is Cosmos Video SOC 2 certified?

Cosmos Video is SOC 2 Type II attested. The full report is available under NDA through the trust centre at security.cosmos.video. Type II covers the operating effectiveness of security controls over a period — not just their design.

### Can Cosmos Video be deployed in regulated industries?

Cosmos Video is used by teams in regulated sectors when paired with their own internal controls. The platform is GDPR compliant and SOC 2 Type II attested but is not HIPAA-certified. Customers with HIPAA or FedRAMP requirements should review the trust centre before contracting.

### Does Cosmos Video support SSO on all plans?

SSO (SAML, Google Workspace, Microsoft 365) is available on Team and Business plans. Free and Starter plans support email + password with optional two-factor authentication. Enterprise customers can enforce SSO-only sign-in at the org level.

### How does Cosmos Video handle guest access?

Guests join specific rooms through expiring shareable links without creating an account. Space admins control which rooms allow guests and can revoke links at any time. Guest activity is logged alongside member activity in the admin audit log.

### Where are Cosmos Video servers located?

Cosmos Video operates six global media server regions for low-latency routing. EU customers can request EU-only data residency for media and recordings. Full data-flow documentation is in the trust centre at security.cosmos.video.