Resources & downloads
Document downloads and the request flow for items that require a signed agreement or NDA. Standard turnaround is one business day.
Data Processing Agreement
On request, one business dayGDPR Article 28 processor agreement with EU SCCs as annexes. Pre-signed by Koji B.V., counter-signed on request.
Request signed copyBusiness Associate Agreement (HIPAA)
On request, one business dayStandard BAA template for US healthcare deployments. Available as part of the enterprise contract.
Request BAASub-processor register (PDF snapshot)
On request, one business dayPDF snapshot of the current sub-processor register. The live HTML version is always at /compliance/sub-processors.
Request PDFPre-filled CAIQ Lite
On request, one business dayCloud Security Alliance's CAIQ Lite security questionnaire, pre-filled with Koji's responses across the standard control families.
Request copyPre-filled SIG Lite
On request, one business dayShared Assessments SIG Lite questionnaire, pre-filled across the standard categories. Suitable for financial-services and regulated-industry procurement.
Request copySecurity overview (PDF)
On request, one business dayTwo-page PDF summary of Koji's security architecture, controls, and certifications, suitable for sending to InfoSec teams ahead of a call.
Request PDFPenetration test summary
Under NDARedacted summary of the most recent third-party penetration test. Released under a one-page NDA.
Request under NDASOC 2 Type II report
Under NDAReleased to enterprise customers under NDA once the first audit completes. Subscribe to be notified.
Subscribe to updatesBundled "first-call" package
Most enterprise evaluations start with the same three documents. We send all three together when you request the "first-call package":
- Pre-signed DPA (PDF)
- Security overview (2-page PDF)
- Pre-filled CAIQ Lite questionnaire
Request the first-call package → We reply within one business day with all three attached.
Standard request format
To keep turnaround fast, include the following in any document request:
- Your company name and the entity that will sign the contract
- Your role and team
- The deployment region you are evaluating (US or EU)
- The use case in one sentence
- Any deadlines or procurement constraints we should know about
Need something not listed here?
Email [email protected] and describe what you need. Most requests are answered the same day.