Compliance and data processing
Where your data lives
CoSell runs in HabileLabs' AWS account in us-east-1 (N. Virginia), the region that serves the AWS Partner Central API. All of the following stays there:
- your workspace's records;
- your Zoho and Slack credentials;
- sign-ins;
- logs;
- data exports.
The static console and documentation are served worldwide through Amazon CloudFront, and carry none of your data.
The quality coach sends the text it scores to Amazon Bedrock through the US inference profile. So a request can be served from us-east-1, us-east-2 or us-west-2. Amazon Bedrock does not keep the text or use it for training.
Your deals stay in your Zoho data centre and your opportunities stay in your AWS Partner Central account. CoSell reads and writes them on your instructions, but they are your systems.
Who processes it
| Processor | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, storage, email, sign-in and AI | United States |
HabileLabs uses no other processor for your data. Zoho, AWS Partner Central and Slack are services you connect yourself.
Data processing agreement
HabileLabs signs a data processing agreement (DPA) with customers who need one. It covers:
- HabileLabs acting as your processor;
- the security measures on this page and on Security and data;
- notice before any new sub-processor;
- help with requests from the people in your data;
- breach notification;
- deletion when you leave.
Ask support@habilelabs.io for a copy.
Keeping and deleting data
You choose how long history is kept, can export everything at any time, and can delete the workspace yourself. See Security and data for the retention table, what an export holds, and the deletion timeline.
Reviews and certifications
- AWS Foundational Technical Review: in preparation for CoSell's AWS Marketplace listing. This page will say when AWS has approved it.
- SOC 2 Type II: planned, not started.
To report a security issue, email support@habilelabs.io with "Security" in the subject.