Security built on transparency

Cobl keeps your data safe and compliant, with maximum control

Talk to our team
Cartoon-style illustration of a determined and heroic-looking document character with a cape, clenched fists, and an intense expression, resembling a superhero in action.

Privacy by Design

Diagram showing a segmented path with data points leading to a server icon marked with an error warning, indicating potential issues detected in a data flow or system pipeline.
Diagram showing multiple data paths converging into a centralized Scaleway server, representing secure data aggregation, cloud infrastructure, or traffic routing.
Interface showing multiple AI model icons in a carousel layout, with the OpenAI model selected and a cursor clicking on 'Select this model' button.

Agent guardrails

The agent operates with a fixed list of 20+ tools. Each tool call is validated against a strict schema before execution.
Each project runs in a dedicated sandbox. The agent cannot access files or data outside its workspace
Each conversation turn is capped at a maximum number of tool calls. The agent cannot loop indefinitely.
Interface showing multiple AI model icons in a carousel layout, with the OpenAI model selected and a cursor clicking on 'Select this model' button.

Run Cobl your way

Choose the deployment model that fits your security and compliance requirements

European cloud

By default, Cobl data is hosted in Dublin.

Data hosted in Europe

Cobl runs on Vercel's dub1 region in Dublin, Ireland. All application data stays within the European Union. Product analytics go through PostHog EU (eu.i.posthog.com). No data transits through US infrastructure for core application operations.

Cartoon illustration of a confident document character wearing a beret and holding a baguette.

SOC 2 Type 2 and ISO 27001 certified

Vercel holds SOC 2 Type 2, ISO 27001:2013, and PCI DSS v4.0 certifications. These cover the infrastructure Cobl runs on: compute, networking, storage, and deployment pipeline. Vercel also maintains GDPR compliance with a Data Processing Addendum and participates in the Data Privacy Framework. Cobl itself holds no independent certification today.

Cartoon illustration of a serious-looking document character wearing glasses, inspecting a pipeline with a magnifying glass and ruler, symbolizing data flow monitoring or debugging.

AES-256 encryption with WAF and DDoS protection

Vercel encrypts data at rest with AES-256 and in transit with TLS. All Cobl traffic benefits from automatic DDoS mitigation and managed WAF rulesets covering the OWASP Top 10. Cobl does not manage encryption keys at the application level: no field-level encryption, no dedicated KMS.

Regular third-party penetration testing

Vercel runs third-party penetration tests on a regular cycle, alongside daily code reviews, static analysis, and dependency scanning. Full details at vercel.com/security. Cobl also run its own independent penetration tests with Exodata.

Cartoon illustration of a focused document character blowing air to spin a pinwheel, symbolizing effort, energy, or trying to power something manually.

Private Cloud (AWS or Azure)

Deploy in your own account for complete control.

Hosted directly in your AWS or Azure tenant
Native SSO/IAM integration
Your policies for retention & deletion

Hosted directly in your AWS or Azure tenant

Full control inside your own cloud environment.

Learn more

Private Cloud (AWS or Azure)

Deploy in your own account for complete control.

Learn more
cobl logo in black and white.

Private Cloud (AWS or Azure)

Deploy in your own account for complete control.

Learn more
Hosted directly in your AWS or Azure tenant

Hosted directly in your AWS or Azure tenant

Full control inside your own cloud environment.

Woman standing in a data center hallway, reviewing information on a tablet, with server racks and a reflective glass wall beside her.
Native SSO/IAM integration

Native SSO/IAM integration

Use your existing authentication and access policies.

Close-up of a Microsoft login screen prompting the user to approve a sign-in request using the Microsoft Authenticator app.
Your policies for retention & deletion

Your policies for retention & deletion

You define data storage, retention, and deletion rules.

Modern, dimly lit glass entryway with visible stairs in the background, possibly part of a tech facility, office building, or data center.
Use Azure OpenAI, Bedrock, or your own models

Use Azure OpenAI, Bedrock, or your own models

Connect securely to your preferred AI providers.

3D-rendered prompt input field with the text 'Enter your prompt here!' and a brain icon, set against a dark background with glowing orange and gray plus signs.
Stable releases every 6 months

Stable releases every 6 months

Reliable, tested updates on a predictable schedule.

Group of people working on laptops around a shared table in a collaborative workspace, with a close-up of one person focused on their screen.
No vendor lock-in, deployed in days

No vendor lock-in, deployed in days

Independent setup, quick deployment, zero dependencies.

Man wearing wireless earbuds and glasses working on a laptop at home, sitting near a bright window and indoor plant.

On-Premise

Run cobl fully inside your infrastructure.

Keep data entirely in-house
Define your own retention and deletion policies
Integrate with your SSO and IAM
Run self-hosted models with Ollama
No internet connection required
Packaged updates provided every 6 months

FAQs

Quick answers to help you get started with cobl

How does on-premise or private cloud installation work?

Contact us at contact@cobl.ai to receive documentation on costs, timelines, and support.

Contact Us
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.