Security and data protection (KVKK)

Your organization owns its data, and where it is stored is stated clearly.

KVKK is Türkiye's personal data protection law. Here's how it applies to Cohie.

How data is protected

Your organization controls program data: Your organization controls the program data (applications, scores, deliverables), and Fauna Venture Studio processes it only on your instructions. For account data (name, email, sign-in records), Fauna Venture Studio is the controller.
Where it's stored: The database and files are on Cloudflare, and emails go out through Resend. Both are US companies, and no data is stored in Türkiye. The legal basis for transferring data abroad (KVKK Article 9) is set out in the data processing agreement and the subprocessor list.
Take it with you: Download any list (applications, scores, attendance, deliverables) as Excel or CSV whenever you want. You can also take all of your organization's data, files included, in one archive. Both are on the free plan.
Notice and consent are separate: Applicants see your privacy notice before they apply. Explicit consent is a separate, unchecked box and never a condition of applying. Your organization sets the text and the retention period.
Organizations can't see each other: No organization can reach another's data, and a sign-in only works on the web address where it was made.
No ads, no tracking: We don't sell data or use it for ads. The only cookies are for your session and preferences.

You get direct support from the Cohie team during setup and use. Free for 2 programs at a time.