Skip to content
Coofi
Log inTry freeOpen the app
Try freeOpens on 18 JanuaryLog inOpen the app
14 days free · from €29 a month excl. VATNederlands
Bekijk deze site in het Nederlands
Trust · your data at Coofi

Your business is yours. We keep it that way.

Coofi stores your data in Frankfurt, with AWS. Every business in Coofi is walled off from every other business in the database, with row-level security in PostgreSQL. When Coofi searches the web, only the search words go to Linkup, a European search service; the code stops a search with an email address, phone number or IBAN before it leaves.

Try 14 days freeOpens on 18 JanuaryWho helps us
Your data is stored with AWS in FrankfurtEvery business walled off down to the databaseAnything that goes out waits for you
Film · 0:06 · example · Coofi test businesses · Dutch on-screen text
01You decide what goes outSending, publishing, money and anything legally binding02Evidence over assumptionsEvery important claim with a real source03Only your businessWalled off down to the database, row by row04In FrankfurtWith AWS, in the EU, kept apart per business
Fig. 1 · Does Coofi send anything by itself?

Coofi prepares. Anything that goes out waits for you.

No, not without you. Internal work just carries on, with updates. Everything that leaves the building or cannot be undone goes to Approvals and stays there until you approve it. After sending, you still have 10 seconds to undo a quote, invoice, reminder or client link.

Approvals · 3 waiting for youMoney and mail: always a person

Waiting for you

Goes out or cannot be undone
Reply to Marieke KokInbox assistant · new leadGoes out
Reminder to Jansen AdvocatenInvoice 2026-041 · €1,650Money
lisavos.nl · put version 12 liveWebsite · ready in the previewGoes live

Internal, by the manager

Can be undone · you still see it
Note for Marketing: new brand coloursInternal · can be undoneManager approved
Lisa gave her OK · reminder sentOK
Example · Studio Lisa Vos is a Coofi test business, not a customer
Runs freely
Reading mailDraftsAnalysisBuilding a site in the previewNotes for your departments
Waits for you
Sending mailPutting a website livePublishing a postAnything with moneyAnything legally binding
The manager agent may approve purely internal proposals itself. Anything that goes live, sends, publishes, touches money or is legally binding can only be approved by a person. That is fixed in the code, not in an instruction the model can ignore. If the manager is unsure, it simply comes to you.
Quote Hof van Holland · notesMoneybird · 7 min ago

45 hours at €951 2, rounded to €4,250. Hof van Holland prefers email to a phone call3, so the quote goes out as a draft by email. Similar to Café Mout4.

1 · Email from Sanne, 14 Oct2 · Hourly rate · Moneybird3 · Email from Sanne, 2 Oct4 · lisavos.nl/work
No source foundLeft blank

There is no price for the packaging anywhere, not in your mail and not in earlier quotes. I left that line open: [packaging price].

Example · amounts and emails of the test business Studio Lisa Vos
Fig. 2 · What does Coofi base things on?

Every claim with a source. No source, and Coofi says so.

On a real source. For an amount, an agreement or a fact about a client, you see where it comes from: a document, a page, a message. What Coofi cannot back up, it leaves open instead of guessing.

  • 01Found is not yet proof. A piece of text that seems to fit is a candidate. It only counts when the real source behind it checks out.
  • 02Memory has sources too. What Coofi remembers from a job gets that job as its source. Something you reject does not come back.
  • 03The web with its address. A fact from a website is given with the address of that page.
Fig. 3 · Can another business see my data?

One business, apart from every other. Down to the database.

No. Another business can never see your documents, conversations, memory, tasks or websites. That does not depend on the app alone: with row-level security in PostgreSQL, the database itself only lets through the rows of your business.

Studio Lisa Vos
DocumentsLisa’s only
Conversations and memoryLisa’s only
Websites and filesLisa’s only
Bonenhuis
DocumentsDaan’s only
Conversations and memoryDaan’s only
Websites and filesDaan’s only
This is how we test it, after every change to the foundation · Studio Lisa Vos and Bonenhuis are test businesses
  • 01Every request names your business. There is no way in the code to ask for data without saying which business it belongs to.
  • 02Security per row in the database. Your business is set for each request and cleared again afterwards. A bug in the app alone is not enough to see anything of someone else’s.
  • 03Files kept apart per business. The storage refuses a file that falls outside your business.
  • 04Nothing hangs in the wrong place. A message can never be attached to a conversation of another business.
Within your business, your departments do work togetherMarketing, Website and Money read each other’s documents and decisions, with the source attached. The wall stands between businesses, not between departments. An agency gets a separate business for each client.
Fig. 4 · Where is my data?

In Frankfurt. And on the web, only the search words.

In Frankfurt, with AWS in the eu-central-1 region: your database, your files and your connections. When Coofi searches the web, only the search words go to Linkup.

In Frankfurt

EU

Your data is stored with AWS in Frankfurt. Files are kept separate from the database and apart per business.

AWS · Frankfurteu-central-1
Databaseyour texts, conversations and dataFrankfurt
Filesseparate from the database, apart per businessFrankfurt
Connectionsthrough our own Nango, in our own AWS accountFrankfurt
Raw keys for your connections are never in our database. The AI engine remembers no conversations: it gets what it needs for each job.The AI model that writes your drafts runs in the EU, through Cortecs. Who does that is listed under sub-processors.

Searching without your clients

Through Linkup

When Coofi searches the web, only the search words leave the building. The code stops a search with an email address, phone number or IBAN before it leaves.

brand identity artisan bakery examples
Sent · search words only
quote brand identity ●●●●●@●●●●●.nl
Stopped · contains an email address
Linkup is a European company, with data in the EU and nothing kept. Coofi reads pages with its own reader, on public addresses only.
Only for jobsSearching only happens in jobs you assign, never in the quick chat. You can switch it off per business.
Your own library comes firstWhat is on the web is information to weigh, never an instruction to follow.
Every search in the logA stopped search is in there too, without its content. Every search is a cost line.
Fig. 5 · Is what Coofi does recorded?

See what happened, step by step.

Yes. There is a log of what happened, and every job with its steps and costs. What Coofi read, where it searched, what it stopped and who gave the OK.

  • 01Every call to a model is recorded, with the model, the tokens and the cost, in your business’s name.
  • 02An agent’s rules changed? Then there is a new version. The old one is kept, so you can always see what applied.
  • 03An OK with a name. What cannot be undone is only finished with a person who approved it.
Job · reply to Marieke KokTuesday 3 November
  1. Read Marieke’s emailGmail · source for the draft
  2. Checked your calendar, 2 slots freeGoogle Calendar
  3. Searched the webLinkup · “brand identity artisan bakery examples” · cost line
  4. Search stoppedContained an email address · the content was not kept
  5. Draft ready, with 3 sourcesInbox assistant · in your tone
  6. Waits for your OKGoes out
  7. Lisa gave her OK, sentApproved by a person
Example · the log of the test business Studio Lisa Vos
Fig. 6 · Can I take my data with me or have it deleted?

You take everything with you. Or you make it really disappear.

Yes, both. Without a plan your business is locked, never gone. You can always download. And if you delete your business, it is really gone after 31 days.

Download everything

Also without a plan
Your whole businessZIP
Everything of your business, in one downloadReady to download
Your websiteZIP
The finished site, for any host, with a short guide
Your website goes offline 14 days after your plan ends, and comes back with one publish.

Delete

Really gone after 31 days
  1. FirstYour domain stays yoursIf you bought a domain through Coofi, you get the transfer code first. The delete waits for your tick.
  2. Day 0You delete your businessOnly when you confirm it. From then on it is locked.
  3. Day 31Really goneWith your websites, the keys of your connections and your files.
  4. What remainsOne line with numbers and datesWhich business and when, without content.
Sub-processors

Who processes my data, and what for?

The services Coofi uses to work. We keep this list up to date.

Sub-processors: who, what for, where and when
ServiceWhat forWhere
Always
Amazon Web ServicesHostingHosting: the database, your files and the backupsAlwaysFrankfurt, Germany
CortecsAI gatewayPasses the text of a task to the AI model, and the draft back. Keeps none of it.When Coofi writes or reads for a taskVienna, Austria
EU AI providersModel hosting, through CortecsRun the AI model that writes the drafts. Not allowed to keep your data or train on it.When Coofi writes or reads for a taskEU
StripePaymentsTakes payment for your plan. Card details stay with Stripe.When you payTo be confirmed
ResendEmail deliveryDelivers Coofi's own emails to you: sign-in links, codes and notificationsAlwaysIreland, EU
ModalBuild sandboxRuns the code of your website or app while Coofi builds and checks itWhen Coofi builds or changes a website or appRuns in the EU (Modal is a US company)
Only if you switch it on or connect it
Amazon Web Services, through CortecsThe Opus model onlyRuns Opus, only for a job you choose it for. In EU data centres; Amazon is a US company.Only if you choose Opus for a jobIreland and France
LinkupWeb searchRuns a web search with the search words only. Keeps nothing.Only if you switch on web searchEU
GoogleGmail, Google Calendar, Google Drive, and Google sign-inOnly when you connect itTo be confirmed
MicrosoftOutlook, the Microsoft 365 calendar, and Microsoft sign-inOnly when you connect itTo be confirmed
MetaInstagramPublishes the Instagram posts you approvedOnly when you connect itTo be confirmed
LinkedInPublishes the LinkedIn posts you approvedOnly when you connect itTo be confirmed
KlaviyoSends the newsletters you approvedOnly when you connect itTo be confirmed
Moneybird or e‑BoekhoudenYour quotes, invoices and reminders, in your own bookkeepingOnly when you connect itTo be confirmed
Zapier or MakePasses events and drafts between Coofi and your other toolsOnly when you connect itTo be confirmed

In the EUOutside the EULocation to be confirmed

For parties based outside the EU, or with a parent company there, the data processing agreement names the safeguard: the EU-US Data Privacy Framework or the EU standard contractual clauses. Tools you connect with your own account and key, like Slack, GitHub or Supabase, fall under your own agreement with them.

Checked against the code on 14 October 2026 · the data processing agreement is being prepared
Questions about your data

Frequently asked questions about your data in Coofi

Can another business see my data?

No. Every business is walled off down to the database, with row-level security in PostgreSQL. Even with a guessed number another business gets to see nothing, and we test that after every change to the foundation.

Does Coofi train AI models on my data?

No. Coofi does not train any models at all, so not on your data either; we use existing models to write drafts for you. What each party that runs a model does with training, we cannot check on your behalf. That is why we name those parties in the list of sub-processors, so you or your advisor can read their terms.

Where is my data?

In Frankfurt, with AWS in the eu-central-1 region. Your database, your files and the connections to your other apps are there, in our own AWS account. The AI model that writes your drafts runs in the EU, through Cortecs. Which party that is, is in the list of sub-processors.

Can Coofi send or publish anything by itself?

No. Sending, publishing, money and anything legally binding waits for a person. That is fixed in the code. Coofi prepares and shows the sources, you give the OK.

What goes to the web when Coofi searches?

Only the search words, through Linkup. A search with an email address, phone number or IBAN is stopped before it leaves. Coofi reads pages with its own reader.

Can a client of my agency see more than I want?

No. Every client is a separate business in Coofi and sees no other clients. With a private link to a design, a client can look and comment, nothing else. Such a link works for 30 days and you can revoke it.

What happens to my data if I stop?

Your business is locked, never gone, and you can download everything, also without a plan. If you delete your business, it is really gone after 31 days, with its sites and files.

Do you have any certifications?

No, we name no certifications on this page. Here you see how Coofi is built, with the screen where you can check it. Which services help us is in the list above.

Privacy statementTerms and conditionsData processing agreementCookies

Let Coofi do the work. You keep the keys.

Connect your mail and your bookkeeping. Coofi prepares, shows the sources and waits for you on anything that goes out.

Try 14 days freeOpens on 18 JanuaryFrom €29 a month excl. VAT

Updated on