Skip to content

Data residency

Where Coassemble stores your data by default, where AI processing runs, and the region-locked options for teams with data residency requirements.

By default, Coassemble runs on US infrastructure. The application is hosted in Oregon, USA, and uploaded files are stored in AWS object storage in the US (us-east-1). This covers course content, uploaded documents and learner data. AI features use Google's Gemini models, through OpenRouter, our AI gateway.

For teams with data residency requirements, Coassemble offers region-locked servers in the US, EU, UK and Australia. Region locking is available on the Partner plan and is arranged as part of your account setup.

What is the default data region?

The US. Unless a region-locked server is set up as part of your plan agreement, your data is hosted in Oregon, USA, with uploaded files stored in AWS us-east-1 (USA).

What region-locked options are available?

Region-locked servers are available for four regions:

  • US (United States)
  • EU (European Union)
  • UK (United Kingdom)
  • AU (Australia)

On a region-locked server, your course content, uploaded documents and learner data are stored in the region you choose. AI processing can run in a different region (see below).

Which plan includes region locking?

Region locking is available on the Partner plan. One locked region is included, and more regions can be added to your agreement. See coassemble.com/pricing for plan details.

Region locking is set up as part of your account setup, so choose your server option with our team before you set up.

What about dedicated servers?

Dedicated servers (single-tenant environments) are also available on Partner and can optionally be region-locked. Self-hosting is available on request for teams with specific deployment requirements.

What encryption standards apply?

  • Data at rest: AES-256
  • Data in transit: TLS 1.2

Frequently asked questions

When do I choose my data region?

Before you set up. Your server environment is chosen as part of setup, so talk it through with our team first.

Does AI processing stay in the selected region?

Not always. Your content stays stored in your region, but where AI runs depends on your server:

  • US servers: AI features use Google's Gemini models, through OpenRouter, our AI gateway.
  • UK servers: Your content is stored in the UK. AI processing, including image generation and narration, runs in Google's EU region.
  • Australian servers: Your content is stored in Australia, and AI text processing runs in Sydney. Image generation and narration are processed by Google outside Australia.
  • EU servers: Your content is stored in the EU, and AI processing, including image generation and narration, runs in Google's EU region.

For any other server, such as a US dedicated server or self-hosting, we confirm the AI processing region on request. On region-locked servers, the AI processing location is fixed, with no failover to another region or provider.

Is a DPA available?

Yes, on every plan. Our standard Data Processing Agreement (DPA) is public at coassemble.com/dpa, so you don't need to ask for it. See the Coassemble Trust Centre at trust.coassemble.com for security documentation, including our SOC 2 report and sub-processor list.