BrrainyTrust Center
Compliance status, how we handle your data, and every third party that can see it.
Compliance
- SOC 2 Type IIIn progress
- GDPRActive
Availability and incidents
We could not load incident data (status API returned 530). See the status page. This is a loading failure, not a statement that there have been no incidents.
Data handling
- Processing region: US-East
- Retention: Retained until you delete it - no scheduled expiry
- Encryption at rest: AES-256
- Encryption in transit: TLS 1.2+
Sub-processors
Third parties that may process your data on our behalf. Entries marked conditional are reached only under a specific configuration - a plan, an admin choice, or a model provider you select. If you bring your own model key, those calls go to your own account with that provider.
Running a local model (Ollama, llama.cpp, vLLM, local Whisper or Tesseract) means the content never leaves the deployment, so no third party appears for that work.
Infrastructure
- Amazon Web Services - Hosting, compute, managed Postgres and networking (US-East)
Sees: All stored data, at rest and in transit through our services
Object storage
- Cloudflare R2 - Object storage for uploaded files and capture bodies (varies), conditional
Sees: File contents and capture bodies
Used when object storage is configured for R2 rather than S3.
- Backblaze B2 - Object storage for uploaded files and capture bodies (varies), conditional
Sees: File contents and capture bodies
Used when object storage is configured for B2 rather than S3.
AI inference
- OpenAI - Language model inference, embeddings (US), conditional
Sees: Capture text submitted for analysis or embedding
- Anthropic - Language model inference (US), conditional
Sees: Capture text submitted for analysis
- Google (Gemini / Vertex) - Language model inference, embeddings (US), conditional
Sees: Capture text submitted for analysis or embedding
- DeepSeek - Language model inference (varies), conditional
Sees: Capture text submitted for analysis
- Cohere - Reranking retrieved results, embeddings (US), conditional
Sees: Query text and candidate passages
- Groq - Low-latency language model inference (US), conditional
Sees: Capture text submitted for analysis
- Together AI - Open-model inference (US), conditional
Sees: Capture text submitted for analysis
- Fireworks AI - Open-model inference (US), conditional
Sees: Capture text submitted for analysis
- Alibaba Cloud (DashScope) - Language model inference (varies), conditional
Sees: Capture text submitted for analysis
- Meta - Open-model inference (US), conditional
Sees: Capture text submitted for analysis
Speech-to-text
- Deepgram - Speech-to-text for audio captures (US), conditional
Sees: Audio recordings and their transcripts
- Google Cloud Speech-to-Text - Speech-to-text for audio captures (US), conditional
Sees: Audio recordings and their transcripts
Image and document OCR
- Google Cloud Vision - Optical character recognition on images and documents (US), conditional
Sees: Uploaded images and documents, and extracted text
Payments
- Stripe - Payment processing and subscription billing (US)
Sees: Name, email, billing address, payment method. No capture content
- Razorpay - Payment processing for supported regions (IN), conditional
Sees: Name, email, billing details, payment method. No capture content
Email and notifications
- Loops - Lifecycle and product emails (US), conditional
Sees: Email address, name, product usage milestones. No capture content
- Apple Push Notification service - Push notifications to iOS and macOS devices (US), conditional
Sees: Device token and notification text, which may include brief titles
- Firebase Cloud Messaging (Google) - Push notifications to Android and web (US), conditional
Sees: Device token and notification text, which may include brief titles