Data, privacy and security
Who owns your data, where the written commitments live, and how to get a real answer to a compliance question.
This page points at written commitments rather than restating them. bobwork.ai/privacy, bobwork.ai/terms and bobwork.ai/dpa are the documents your legal team should review. Where this page and those documents differ, the documents govern.
Who owns your data
You do. Your business knowledge and your customer conversations are yours.
The formal terms are at bobwork.ai/terms and bobwork.ai/dpa. If your legal team needs specifics beyond what is written there, ask us and we will get you a direct answer rather than a marketing one.
Is our data used to train AI models?
Your business knowledge exists to answer your customers, not to improve anybody else's model.
This deserves precision rather than reassurance. The exact terms — including what our providers may and may not do — are set out at bobwork.ai/privacy and bobwork.ai/dpa. If your compliance team needs it confirmed in writing for your contract, ask and we will put it in writing.
How customer data is protected
Conversations and business knowledge are held in access-controlled systems, and data moves over encrypted connections.
We would rather point you to the written commitments at bobwork.ai/privacy and bobwork.ai/dpa than make claims in a help article.
If you have a security questionnaire, send it. A real answer to your actual questions is more useful than a paragraph here.
Certifications
Ask us rather than assume, and we will tell you exactly where we stand rather than imply something we cannot back.
If a certification is a hard requirement for your procurement process, raise it early. That is a better use of everyone's time than discovering it at contract stage.
PDPA and GDPR
Our data processing terms are at bobwork.ai/dpa, and that document is the right basis for your legal team's review.
For specific obligations in your jurisdiction or industry, put the question to us directly. Regulatory questions deserve a considered answer from a person, not a help article.
Where your data is stored
Ask us and we will tell you specifically for your deployment, including whether a particular region is possible if you have a residency requirement.
Worth raising early if data residency is a hard constraint, since it can affect how we set things up.
If you leave
It is your data. The terms at bobwork.ai/terms and bobwork.ai/dpa govern what happens at the end of an engagement, including deletion.
If you want specific commitments on export format or deletion timelines written into your contract, raise it during scoping and we will agree it up front.
Frequently Asked Questions
Why does this page not just state your certifications?
Because we will not imply a certification we cannot back. Ask, and you get an exact answer about where we stand — which is more useful to your procurement team than a badge.
Can we get answers in writing for our contract?
Yes. Ask, and commitments go into the contract rather than staying on a help page.
Who do I send a security questionnaire to?
Talk to us and it goes to a person who can answer it properly.
Up next
Your contract, changes and ending an engagement
What the commitment is, how to change your plan, and what happens if you decide to stop.
Still need help?
Our team is available Mon–Fri, 10 AM–6 PM MYT (GMT+8).