Security and compliance

Data hosting and retention policies

Cobbai ensures secure data hosting, backup, and retention practices through partnerships with leading cloud providers that comply with global security standards, including GDPR.

Primary data hosting

Cobbai partners with OVH Cloud, a French cloud provider certified under ISO 27001. OVH Cloud complies fully with GDPR regulations, ensuring that all customer data is hosted securely.

Each client is allocated a dedicated, encrypted server, protecting data both during transmission (in communication) and at rest.

Backup and redundancy

Daily encrypted backups are stored at Scaleway, another ISO 27001-certified French cloud provider. This redundancy ensures high data availability and robust disaster recovery capabilities.

Data retention and deletion policies

Cobbai maintains data securely for the duration of the contract, with regular backups to prevent data loss.

Upon contract termination, all client data and associated servers are permanently deleted. This process ensures no residual data remains, meeting strict GDPR and internal security policies.

Security measures

Encryption
All data is encrypted both in transit and at rest.

Access control
Strict access controls ensure only authorized personnel have access to sensitive data.

Monitoring and auditing
Continuous monitoring and regular security audits help maintain data integrity and identify potential vulnerabilities.

By combining secure data hosting and robust privacy practices, Cobbai guarantees that sensitive client data is managed according to the highest standards of security and regulatory compliance.