Most users use one of the two server instances that we support: KoBoToolbox by OCHA (for humanitarian workers) and KoBoToolbox by HHI (for everyone else). KoBoToolbox can also be installed on local computers or your own web servers. This article is about the security of your data on one of the two supported servers hosted by HHI and OCHA.
 We take the protection of collected data very seriously. HHI hosts data with Amazon Web Services (AWS) while OCHA hosts its data with BlackMesh. Both servers are administered using best practice tools and mechanisms to keep data safe from intrusion or loss. Both servers are currently physically located in the United States of America. AWS security information can be found on this page. BlackMesh security information can be found here. In addition we do regular database backups to protect against any eventuality. The privacy policy and terms of use are both linked on here.
 Once your data is received on the server it is stored in accounts protected by usernames and passwords. However, unless it was encrypted on the handset (see this article), it will be stored 'in the clear' on the server filesystem or within its database, which means that our server administrators could potentially access it. For and only the server administrator has technical access to the database, and we will never access your data unless you have given us explicit access to it. However, to have complete control and ownership of your data, you are also free to install an instance of KoBoToolbox on your own server.

Did this answer your question?