brinker.ai

Security

Security at Brinker

Brinker is committed to the security and privacy of our customers’ data.

ISO 27001 certified

Brinker’s information security management system is certified to ISO/IEC 27001:2022 and audited by an independent certification body. The certificate is available on request.

Data protection

Robust measures to protect sensitive information and meet the standards our government, NGO and enterprise clients expect.

Data at rest

All datastores are encrypted at rest with AES-256.

Data in transit

TLS 1.2 or higher everywhere data moves over a network.

Data backup

Daily encrypted backups with tested restores.

Security controls

Robust measures to protect sensitive information and meet the standards our government, NGO and enterprise clients expect.

Infrastructure security

  • Web application firewall deployed
  • Threat detection and vulnerability scanning in place
  • Production and non-production environments separated
  • Encryption key access restricted

Product security

  • Penetration testing performed
  • Dependency and container scanning on every deployment
  • Secure development lifecycle followed

Access control

  • Single sign-on and multi-factor authentication enforced
  • Role-based access control applied
  • Customer data logically isolated per client
  • Access reviews conducted

Organizational security

  • Security awareness training for all employees
  • Endpoint protection on every company device
  • Incident response plan established and tested
  • Business continuity and disaster recovery plans in place

Responsible disclosure

If you believe you have found a security vulnerability, please report it to security@brinker.ai. We will acknowledge your report and keep you informed as we investigate.

FAQ

Is Brinker ISO 27001 certified?
Yes. Brinker holds ISO/IEC 27001:2022 certification. The certificate is available on request.
Is Brinker SOC 2 compliant?
A SOC 2 Type II audit is in progress.
Where is data stored?
Production data is hosted in the United States. Encrypted backups are kept in the European Union.
Is customer data used to train AI models?
No. Neither Brinker nor our subprocessors use customer data to train or fine-tune models.