Designed for humanity. Built for safety.
Cora sees your screen and talks with you about your money. Here is how CoraVision keeps your data secure, and how Cora is built to stay on your side.
Safety and security have been written into Cora’s core from day one. Not an afterthought.
Cora is built to be on your side.
In AI, alignment means a system works toward the goals of the people it serves and tells them the truth along the way. For Cora, those goals are written down.
Your money comes first.
When goals pull in different directions, Cora's constitution sets the order: your money and time first, honesty about what Cora does not know second, Cora's method third, and being agreeable last.
Cora never makes up a number.
Every figure Cora says is one you gave, one read from your accounts, or a published benchmark, and Cora tells you which. When Cora does not know, Cora says so.
You make every decision.
Cora recommends and explains, and you decide. You make every change in your own accounts. If you go against Cora's advice, Cora says once what that choice may cost you, then helps you do it well.
“A client who leaves a call happy and poorer has been failed.”
That line is why being agreeable sits last in Cora's priorities. Cora will tell you when an idea is likely to cost you money, and why.
The rules Cora reasons from.
We wrote Cora's constitution to keep Cora aligned with, and transparent to, the businesses Cora serves. It says who Cora is, and it lists 18 rules Cora holds however a question is asked. When you start a call with Cora, Cora reads it before anything about your business. Here are six of them.
- 1
Diagnose before prescribing.
Cora names the one problem that, if solved, makes the others smaller, and checks it with you before planning around it. Many marketing problems turn out to be pricing, capacity, retention or offer problems.
- 2
No spend before the arithmetic.
Cora will not put your money into a channel until Cora knows your margin per sale and how often your customers come back.
- 3
No new customers into a full diary.
If you cannot serve more customers next week, Cora will not sell you more of them. Cora works on your prices and your scheduling first.
- 4
Never a number Cora did not read.
A guessed number said with confidence is worse than saying nothing. If an account is not connected or a report fails, Cora says plainly that Cora could not see it.
- 5
Recommend down as readily as up.
“You don’t need that yet, don’t pay for it” is a sentence Cora is built to say. It is what makes the next recommendation worth trusting.
- 6
Say no once, then help.
When Cora turns something down, Cora gives the reason in one sentence and moves straight to an alternative. No lectures, and no “I told you so” later.
Protections you can see in the app.
Three of the ways CoraVision protects you show up on your own screen.
Two-factor authentication
Every sign-in, and every change to your email, mobile or password, needs two-factor authentication: your password, then a six-digit code we send you. A stolen password on its own gets nobody into your account.
Nothing seen until you start
Cora sees your screen only during a session you start. Cora gets still images, not a recording, and they are never saved. Outside a session, CoraVision captures nothing.
Read only, and yours to end
CoraVision reads your Google Ads and Meta numbers and never changes anything in your accounts. Disconnect a platform and CoraVision deletes the access it stored and asks Google or Meta to withdraw it.
How your data is kept safe.
CoraVision's database runs on secure servers in Sydney. These protections apply to every account.
Stored in Australia
Your account, your plan and your transcripts are held in Sydney. Some processing, including the AI that runs Cora, happens with providers in the United States.
Encrypted in transit and at rest
Everything between the app and our servers travels over an encrypted connection (TLS), and the data we store is encrypted on disk.
Your records stay yours
Row-level security in the database ties every record to its owner, so one customer's account can never reach another customer's data.
Keys stay on our servers
The keys that reach our AI providers and Stripe never sit on your computer. Each voice session gets its own short-lived key.
Your card goes to Stripe
You type your card into Stripe's own form. CoraVision only ever sees the card type, the last four digits and the expiry date.
Screen text can’t give orders
A web page or email on your screen can hide text written to trick an AI. Cora treats everything on screen as content to help with. Cora's rules come only from our servers.
Who at CoraVision can see your data.
A small number of people on our team, those with the owner or support role, can open your chat and call transcripts to answer a support request or check Cora's work. Nobody at CoraVision can see images of your screen, because they are never kept, or your card number, because it never reaches us.
Staff sign in to our admin tools with a second factor. Every read is recorded with who made it and when, and actions that touch money or data are limited to specific roles. The staff tools are kept separate from the app you use.
Questions we get asked, answered plainly.
More detail is in the Help Centre
See how Cora works, for yourself.
Coming to Mac and Windows.