Atrium hosting addendum

This addendum, effective from 8th October 2026, applies when we host your app on Atrium Hosting, our infrastructure for Atrium apps. It forms part of your Atrium developer agreement with Company For Life Ltd, trading as COHO (“we”, “us”). Words defined in the Developer Agreement mean the same here.

Private apps that customers build and host with us for their own account are covered by the Atrium terms, not this addendum.

What we provide

  • Where your app runs. In our own environment on Amazon Web Services in London, kept separate from our test environments.
  • Building your app. We build your app from the GitHub repository or zip file you register, using your Dockerfile. Pushing to your repository doesn’t deploy anything. You update your app by asking us to rebuild it.
  • Resources. Each app gets a fixed allocation of processing power and memory, and runs as a single instance. We set the allocation, and may change it by giving you notice.
  • Storage. A private, encrypted storage area for your app, mounted at `/data`. It survives rebuilds.
  • Network. Your app runs on our private network. If it has a user interface, we give it a public HTTPS address under coho.software.
  • Secrets. We give your app the secrets it needs to connect to Atrium when we deploy it. They are never stored in your image.

The technical requirements your app must meet, including the Dockerfile requirements for hosted apps, are in the Atrium developer docs.

Customer data and access

  • You won’t have access to customer data, your app’s stored data, server logs or backups in our environment.
  • You can see the logs your app sends to the Store.
  • If you need information to investigate a problem for a customer, ask us. We’ll only share it with the customer’s approval, and we’ll keep a record.
  • When a customer uninstalls your app, your app must delete that customer’s data, as the Atrium Standard App Data Processing Agreement requires.

Backups

We back up your app’s stored data daily and keep backups for 7 days, to recover from a failure of our systems. Backups aren’t available to you for restoring individual records.

Keeping your app secure and supported

You must:

  • use operating systems, runtimes, frameworks and base images that are still supported with security updates by whoever provides them;
  • rebuild your app with the fix within 14 days of us telling you about a critical security issue in it, or within 30 days for any other security issue;
  • send customer data only to the destinations listed on your app’s listing, including your sub-processors;
  • not try to access other apps, our systems or networks, or get around any limit or security measure.

We may scan your app’s image and monitor its outbound connections to check these requirements, and block connections to destinations that aren’t on your listing.

Limits, suspension and removal

We may slow down, pause or suspend your app if:

  • it uses more than its resource allocation, or affects other apps or our systems;
  • it uses software that’s no longer supported, or you don’t fix a security issue within the time above;
  • it sends data to a destination that isn’t on its listing;
  • you haven’t paid the hosting fee;
  • any reason in the Developer agreement applies.

Where we can, we’ll tell you first and give you a chance to put things right. If a security issue is being actively exploited, we may act straight away and explain afterwards.

Availability

We use reasonable efforts to keep Atrium Hosting running, but we don’t promise any level of availability and we don’t give service credits. We’ll give you notice of planned maintenance where we can.

Hosting fee

  • We charge a hosting fee for each app we host. It’s £10 a month plus VAT, unless your Commercial schedule says otherwise.
  • The fee is charged by calendar month. If your app is first deployed on or before the 15th of a month, we charge that month. If it’s deployed after the 15th, we charge from the next month.
  • We deduct the fee from your Developer Share. If your Developer Share doesn’t cover it, it’s collected as set out under “Amounts you owe us” in the Distribution & billing addendum, including from the card on your developer account.
  • We may change the fee by giving you at least 30 days’ notice.
  • We may waive or reduce the fee by agreement. If we do, it’ll be set out in your Commercial schedule.

When your app or this addendum ends

When you stop supporting your app, or the Developer agreement ends, you must support existing customers for 90 days, as the Developer agreement requires. During that time:

  • we may keep running the last version of your app we built, so customers aren’t left without it. This is our choice, and we have no duty to update or fix it;
  • your licence to us to host and run your app continues for those 90 days, even if the Developer agreement has ended;
  • we stop charging the hosting fee from the end of the month in which the Developer agreement ends.

When we stop hosting your app, we delete its running service and its stored data within 30 days. We keep the images we built and any zip files you uploaded for 12 months, for security and dispute purposes, and then delete them.

Changes to this addendum

We may update this addendum from time to time. We’ll give you at least 30 days’ notice of any change, unless it’s needed to comply with the law or to deal with a security risk.