How we handle your data, in plain words
Brainyo is built to be trusted with your organisation's documents. This page says what we do today, who we rely on, and what we haven't done yet.
Workspace isolation
Every table that stores customer data carries an organisation identifier, and every query is scoped to it before it touches the database. The scope comes from your signed-in session, never from a value the browser sends, so isolation does not depend on a filter being remembered in the interface.
Sign-in you can rely on
Sign-in runs through Keycloak, a self-hosted, open-source identity provider using the OIDC standard. No third-party identity vendor ever sees your team's credentials, and roles control what each person can do.
Encryption
All traffic to Brainyo is encrypted in transit with TLS. Uploaded documents are stored in Cloudflare R2, which encrypts data at rest at the storage layer.
Deletion is real
Deleting a document, a project or an account removes the data with cascading deletes. It is not a hidden flag that leaves your content sitting in a table. Account deletion has a 15-day grace period. Then your profile, your personal workspace and every conversation you started are erased; documents you added to a workspace you share stay with that workspace.
What happens to a document
From the moment you upload a file to the moment you delete it.
Upload
The file goes to encrypted object storage, tied to your workspace.
Index
It is parsed to text, split into passages and turned into search vectors.
Answer
Questions search only your workspace. Relevant passages go to our AI providers to write the answer.
Delete
You remove it and the file, its text and its vectors are deleted.
Who we rely on
Every service that touches your data, and what each one is for.
What we haven't done yet
- •We have not completed a formal SOC 2 audit. We follow SOC 2-aligned practices and plan the audit as we grow.
- •Brainyo is in beta. Expect changes, and please do not rely on it as the only copy of important files.
- •Single sign-on with your own identity provider is not available yet.