Miami moves deposits, freight and cruise passengers across borders. Every crossing starts with a login.
A Miami bank can open an account for a depositor in Bogotá before lunch. By the afternoon a forwarder at the airport is clearing cargo for a dozen Latin American carriers, and on Saturday a cruise terminal checks in thousands of guests. All three businesses depend on knowing who sits behind each account.
- Customer Identity (CIAM)Cybersecurity
- Identity Threat Detection & ResponseCybersecurity
- Identity Governance & AdministrationCybersecurity
- API IntegrationApplication Services
- Banking & Capital Markets PlatformsEnterprise Platforms
- Healthcare Provider PlatformsEnterprise Platforms
- Data Governance & AccessData & Analytics
For Miami organizations we build customer and workforce identity, partner access and governed data pipelines.
International banks and fintechs need remote onboarding and account takeover controls that stand up to Florida and federal rules. Cargo, cruise and hospitality firms need quick sign-in for seasonal and contract staff. Cohash is headquartered in Frisco, Texas. We serve Miami remotely and fly in for workshops and launches.
Cohash has no Miami office. Our US base is Frisco, Texas, and we run Miami work remotely, flying in for discovery sessions, design workshops and launch weekends.
- rules
- Florida breach notification, Fla. Stat. §501.171Florida Digital Bill of Rights, Fla. Stat. ch. 501 part VFlorida international banking, Fla. Stat. ch. 663FTC Safeguards Rule, 16 CFR Part 314
What's specific about Miami
Each figure comes from a public source, linked on the card.
Miami International Airport ranked first among US airports for international freight in 2025 and second for international passengers, with 24.9 million, in the Miami-Dade Aviation Department's 2025 rankings built from ACI data.
source ↗ 02 8,564,225PortMiami handled 8,564,225 cruise passengers in fiscal year 2025 (October 2024 through September 2025), the most in its history, plus 1,115,058 TEUs of cargo, Miami-Dade County reported in December 2025.
source ↗ 03 2,965Financial activities account for 214.6 thousand of the Miami-Fort Lauderdale metro's 2,965.6 thousand nonfarm jobs, and trade, transportation and utilities for 649.0 thousand, in BLS figures for September 2026 (preliminary).
source ↗ 04Baptist Health South Florida reports 12 hospitals and 200 outpatient centers spread across Miami-Dade, Monroe, Broward and Palm Beach counties.
source ↗Who we work with in Miami, and the rules they work under
-
International and private banking
Banks serving depositors in Latin America and the Caribbean onboard people they will never meet in a branch. Document checks, device binding and step-up authentication have to work across borders and languages. We design the customer identity flow, separate relationship managers' admin access from customer channels, and log every override for the examiners.
-
Air cargo and freight forwarding
Forwarders, customs brokers, ground handlers and airlines all log into each other's portals. Partner accounts pile up and rarely expire. We federate partner sign-in where the other side supports it, put an owner and an end date on every external account, and move the API keys behind airline and customs integrations into a vault.
-
Cruise lines, hotels and guest apps
Loyalty and booking accounts attract credential stuffing, and crews rotate on and off ships every few months. We add passkeys and breached-password checks for guests, then tie crew and shoreside staff access to sign-on and sign-off dates so a departed crew member's account closes on its own.
-
Hospital systems
South Florida health systems spread clinicians across many hospitals and outpatient sites. Fast badge sign-in on shared workstations matters, and so does an audit trail showing who opened which chart. We connect clinical apps to one identity source and keep the access logs that privacy officers ask for.
-
Florida breach notification, Fla. Stat. §501.171 ↗
Covered entities notify affected Floridians no later than 30 days after determining a breach, and tell the Department of Legal Affairs when 500 or more residents are affected. A third-party agent gets 10 days to alert the covered entity. Biometric data and geolocation count as personal information.
-
Florida Digital Bill of Rights, Fla. Stat. ch. 501 part V ↗
In force since 1 July 2024. Full controller duties reach only firms with over $1 billion in global revenue that also meet an online-ads, smart-speaker or app-store test. Section 501.715 reaches further, requiring consent before most for-profit businesses in Florida sell sensitive data. GLBA financial institutions and HIPAA entities sit outside it.
-
Florida international banking, Fla. Stat. ch. 663 ↗
Foreign banks that open an international bank agency, branch, representative office or administrative office in Florida need a license from the Office of Financial Regulation, which also reviews the parent bank's home-country supervision.
-
FTC Safeguards Rule, 16 CFR Part 314 ↗
Non-bank financial institutions such as lenders, money transmitters and many fintechs must report to the FTC within 30 days of discovering a notification event that involves at least 500 consumers. The rule also requires MFA for any individual accessing any information system, unless the Qualified Individual approves an equivalent control in writing.
Most requested in Miami
The services clients in Miami ask us for most.
- CybersecurityCustomer Identity (CIAM)
- CybersecurityIdentity Threat Detection & Response
- CybersecurityIdentity Governance & Administration
- Application ServicesAPI Integration
- Enterprise PlatformsBanking & Capital Markets Platforms
- Enterprise PlatformsHealthcare Provider Platforms
- Data & AnalyticsData Governance & Access
01Most of our depositors live outside the US. Does Florida's breach law cover them?
Section 501.171 is written around individuals in Florida, so a depositor living abroad falls under their own country's privacy law and your federal regulator's breach guidance instead. Map where each customer lives before an incident, not during one, and have counsel confirm which notices you owe.
02Does the Florida Digital Bill of Rights apply to a mid-sized bank or fintech?
Usually not. Section 501.703 leaves out financial institutions and data subject to Title V of Gramm-Leach-Bliley, and the controller duties also need the $1 billion revenue test. A non-bank affiliate that sells sensitive data, such as precise location, should still read section 501.715 with counsel.
03How do we cut account takeover on a guest loyalty app before peak cruise season?
Start with breached-password screening and bot detection at login, because those stop most stuffing attacks without changing the guest experience. Passkeys come next for repeat guests. We stage changes so call-center agents see them before guests do.
04Forwarders and brokers each have accounts in our cargo portal. How do we clean that up?
We export every external account, match it to a partner contract and a named sponsor inside your company, then disable what nobody claims. After that, new partner accounts get an expiry date and a quarterly review by their sponsor.
05Can you be on site for a cutover in Miami?
Yes. The design and build run remotely from Frisco, and we schedule travel for the cutover itself and for the workshops before it.
More cities in Florida
28bc987a - 01Miami-Dade Aviation Department, 2025 US and worldwide airport rankingsmiami-airport.com ↗
- 02Miami-Dade County, PortMiami fiscal year 2025 releasemiamidade.gov ↗
- 03BLS, Miami-Fort Lauderdale economy at a glancebls.gov ↗
- 04Baptist Health South Florida careers, aboutcareers.baptisthealth.net ↗
- 05Fla. Stat. §501.171flsenate.gov ↗
- 06Florida Digital Bill of Rights, Fla. Stat. ch. 501 part Vflsenate.gov ↗
- 07Fla. Stat. ch. 663, international bankingflsenate.gov ↗
- 08eCFR, 16 CFR Part 314 (Safeguards Rule)ecfr.gov ↗
Tell us what you're running. We'll tell you what we'd do first.
A 30-minute working session with a senior engineer. No slides.
- The platform and the version you're on
- Where you need to get to, and by when
- What's custom: rules, plugins, integrations
- Any audit finding or deadline driving it