Solutions
Discover how you can run your deals on Cobl, by use-case, industry or role.

Security built on transparency

Cobl keeps your data safe and compliant, with maximum control
Talk to our Team
Customer logos

Privacy by Design

Locked binder illustration
No fine-tuning, no data reuse,
no hidden training
Security agents illustration
Hosted by Vercel in Europe, SOC 2 type 2, and ISO 27001 certified
Versioned repositories illustration
Each asset as a self-contained page in a versionised repository per project

Agent guardrails

The agent operates with a fixed list of 20+ tools.
Each tool call is validated against a strict schema before execution.
Each project runs in a dedicated sandbox.
The agent cannot access files or data outside its workspace
Each conversation turn is capped at a maximum number of tool calls.
The agent cannot loop indefinitely.
Run Cobl your way
Choose the deployment model that fits your security and compliance requirements.

European cloud

Data hosted in Europe
Cobl runs on Vercel's dub1 region in Dublin, Ireland. All application data stays within the European Union. Product analytics go through PostHog EU (eu.i.posthog.com). No data transits through US infrastructure for core application operations.
SOC 2 Type 2 and ISO 27001 certified
Vercel holds SOC 2 Type 2, ISO 27001:2013, and PCI DSS v4.0 certifications. These cover the infrastructure Cobl runs on: compute, networking, storage, and deployment pipeline. Vercel also maintains GDPR compliance with a Data Processing Addendum and participates in the Data Privacy Framework. Cobl itself holds no independent certification today.
AES-256 encryption with WAF and DDoS protection
Vercel encrypts data at rest with AES-256 and in transit with TLS. All Cobl traffic benefits from automatic DDoS mitigation and managed WAF rulesets covering the OWASP Top 10. Cobl does not manage encryption keys at the application level: no field-level encryption, no dedicated KMS.
Regular third-party penetration testing
Vercel runs third-party penetration tests on a regular cycle, alongside daily code reviews, static analysis, and dependency scanning. Full details at vercel.com/security. Cobl also run its own independent penetration tests with Exodata.

Private Cloud (AWS or Azure)

Deploy in your own account for complete control.
Safe inside a cloud illustration
Hosted directly in your AWS or Azure tenant
Full Control inside your own cloud environment.
Keys illustration
Native SSO/IAM integration
Use your existing authentification and access policies
Hands holding a release illustration
Stable release every
6 months
Reliable, tested updates,
on a predictable schedule
Connected AI models illustration
Use Azure OpenAI, Bedrock, or your own models
Connect securely to your preferred AI providers
Open gate illustration
No vendor lock-in,
deployed in days
Independent setup, quick deployment, zero dependencies.
Shelf with stored items illustration
Your policies for retention and deletion
You refine data storage, retention and deletion rules

On-Premise

Run Cobl fully inside your infrastructure.
Keep data entirely in-house
Define your own retention and deletion policies
Integrate with your SSO and IAM
Run self-hosted models with Ollama
No internet connection required
Packaged updates provided every 6 months

FAQ

Everything you need to know about partnering with Cobl
Can the agent act without my approval?

Inside your workspace, yes: the agent reads files, writes documents, runs shell commands and searches the web without asking first. It stops and asks when an action carries external consequences: sharing a document publicly, sending an email, posting to a connected tool. The agent's autonomy ends where your responsibility starts.

Is my data used to train AI models?

Cobl does not train or fine-tune on your data. We manage data retention with our model providers at the contractual level. Details on request.

Where is my data hosted?

Cobl runs on Vercel in Dublin, Ireland (dub1). All application data stays within the European Union. Vercel holds SOC 2 Type 2, ISO 27001, and PCI DSS v4.0 certifications, encrypts data at rest with AES-256, and provides automatic DDoS protection and WAF with OWASP Top 10 rulesets. Full details at vercel.com/security.

Can Cobl handle security questionnaires and DDQs?

Yes, as part of the response set it generates from your connected sources. What Cobl does not do is auto-fill third party vendor assessment portals through a browser extension. If portal-native questionnaires are your primary workflow rather than one input among several, a purpose-built security questionnaire tool will serve you better.

Is sales proposal automation secure?

It can be, but security varies by vendor, so treat it as a buying criterion. Look for clear data residency, encryption, and a commitment not to train AI models on your content. Cobl, for instance, keeps your data yours and hosts on European servers.

Is our client data secure?

Yes. Cobl offers private cloud and on-premise deployment for firms with strict confidentiality or data sovereignty requirements, so your client data stays inside your own infrastructure

Does Cobl meet our data security and sovereignty requirements?

Cobl offers private cloud and on-premise deployment for teams with strict data requirements. Your content stays within your infrastructure.

Is Cobl GDPR compliant?

Yes. Cobl hosts data on EU servers, is GDPR compliant, and does not train AI on your content. For buyers in regulated or public-sector deals, those data residency standards are often a requirement, not a nice-to-have.

Is my data safe when Cobl generates a proposal?

Cobl is GDPR compliant, does not use your data to train AI models, and hosts data on French servers. Because proposals often contain pricing, security details, and client information, that data handling is a deliberate part of the product. You can review the details on the Cobl security page.

How does on-premise or private cloud installation work?

Contact us at contact@cobl.ai to receive documentation on costs, timelines, and support.

Contact Us
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.