Security summary

We take security seriously. This page summarises our overall approach. Detailed information about our controls is shared with customers on request under appropriate confidentiality terms.

Effective date: 12th May 2026

Our commitment

We implement appropriate technical and organisational measures to protect personal data we hold on your behalf, in line with our duties under UK data protection law.

Our measures cover the areas you’d expect (secure hosting, encryption, access control, backups, monitoring, and incident response) calibrated to the scale and sensitivity of what we do.

Hosting

COHO is hosted on Amazon Web Services in the United Kingdom. Our AWS account is covered by the AWS Customer Agreement and AWS Data Processing Addendum.

Sub-processors

Our current sub-processor list includes each one’s purpose, location, and the safeguard for any international transfer.

Certifications

We don’t currently hold SOC 2 or ISO 27001 certification. We’re a small SaaS business and our security posture is proportionate to that.

Security incidents

If a personal data breach affects data we process on your behalf, we’ll tell you as soon as we reasonably can, with the information you need to meet your own notification duties.

Requesting detailed information

If you’re a customer or a prospective customer and you need more detail on our security controls, for example, to complete a vendor questionnaire, please contact support@coho.life. We share that information under appropriate confidentiality terms.

Reporting a security issue

If you think you’ve found a vulnerability in COHO, please email support@coho.life. Don’t post details publicly until we’ve had a chance to investigate.

Regulator

COHO (Company For Life Ltd) is registered with the Information Commissioner’s Office (ICO) under registration number ZA749111.

Get in touch

If you have any questions please email us at support@coho.life.