What Kowalah is
Kowalah is a full software platform with its own application, database, and infrastructure. Anthropic’s Claude is the AI model used for the platform’s AI features — one component (one subprocessor) among several, not the platform’s backend. Your programme data lives in Kowalah’s own database.What the platform is built on
Kowalah runs on a small set of established, managed cloud providers. Each handles a specific, limited part of the service.This is the technical architecture. The canonical, contractual list of data processors — with their roles and locations — is maintained in the Data Processing Agreement and updated as the platform evolves.
Where your data is stored
Your programme data
Held in Kowalah’s Supabase (PostgreSQL) database — the projects, deliverables, opportunities, and related records that make up your programme.
Files you upload
Held in Supabase Storage, authorized per request against the record they belong to.
Fetched on demand
The platform reads data to answer a request and return it. It does not bulk-copy, mirror, or warehouse your data elsewhere.
Managed, encrypted infrastructure
Data is encrypted in transit (TLS) between every hop, and encrypted at rest in the managed database and storage.
Specific hosting regions and data-residency commitments are documented in the Data Processing Agreement and can be confirmed for your contract. Talk to your Kowalah team if you have a regional requirement.
Customer platform vs Kowalah’s internal systems
The application your team uses is separate from the internal systems Kowalah staff use to run the business.- The customer platform (
app.kowalah.com) is where your team works. It reads and writes only your organization’s programme data, enforced by the access controls and tenant isolation described elsewhere in this section. - Kowalah’s internal/admin systems run as a separate application, with their own authentication, so that internal operations are isolated from the customer environment. Your users never connect to these systems, and the customer platform has no path into them.
The two AI access points
Alongside the web platform, Kowalah offers two AI access points into your programme data — the Claude Connector and the Kowalah Agent. These have their own, tightly scoped data model, documented in depth in data flow and exfiltration and data and access control.How data flows through the AI access points
See exactly what can and cannot move between your organization and Kowalah, and how to verify it yourself.