Real data, handled with care.
How we source data
We acquire operational systems from businesses that are distressed, insolvent or winding down. Acquisitions happen as part of a formal sale of company assets, through the administrators, liquidators or restructuring advisers responsible for them.
Every acquisition is reviewed before purchase: who has the right to sell, which systems are included, and which data cannot be transferred. We walk away when those answers are unclear.
Value for creditors
When a business fails, its data usually gets deleted with it. Buying it turns an otherwise worthless asset into proceeds for the company’s creditors, and preserves a record of how real work was done.
De-identification
Before data is used to build anything, personal information is removed or replaced with consistent tokens:
- Names, email addresses, phone numbers and postal addresses
- Bank details, tax identifiers and government ID numbers
- Free-text mentions of people inside documents and mail
Tokens are consistent within a company, so a person who appears in an invoice, a ticket and a mail thread keeps the same reference across systems. Structure, timing and relationships are kept; identities are not.
Security
Raw acquired data is held in an isolated environment with access limited to named staff, logged and reviewed. It is encrypted in transit and at rest, and never leaves that environment before de-identification.
Security documentation and questionnaires are available on request.
Your data
We do not need your data to deliver environments. Agent rollouts, evaluation results and prompts you run against hosted environments belong to you and are not used to build other customers’ environments.
Contact
For security, privacy or sourcing questions, write to hello@cogac.co.