Security

Your trust is our foundation.

We know you are entrusting us with your most valuable data.
Your employees' knowledge.

  • GDPR-compliant
  • Hosted in Germany
  • Works council compliant
  • No AI training with customer data
  • AES-256 encryption
GDPR & German hosting

Your data in Germany.
The platform runs without detours via foreign servers.

The Brainbridge platform runs exclusively on servers in Germany. Your company data never leaves the EU.

Technical details

Platform server locationGermany
Storage of your dataExclusively within the EU
Encryption (at rest)AES-256
Encryption (in transit)TLS 1.3
DPAIncluded once the contract is signed
AI training with customer dataNever
  • Art. 6 GDPR: Processing only on a legal basis
  • Art. 28 GDPR: Data processing agreement (DPA) included
  • Art. 32 GDPR: Technical and organisational measures documented
  • No AI training with customer data guaranteed by contract
  • Right to erasure: Full data export and secure deletion on request

For this website, the information in our privacy policy applies.

Anonymisation & employee protection

Secure knowledge
without monitoring people.

Brainbridge is not a monitoring tool. Transcripts cannot be viewed.

  • Transcripts cannot be viewed Not even by administrators
  • Anonymised storage Knowledge is not stored by person
  • No performance monitoring No analysis by employee
  • No profiling No personality profiles
  • Right of withdrawal Employees can have secured knowledge deleted

What is stored

  • ✓ Knowledge units (anonymous)
  • ✓ Topics & clusters
  • ✓ Time of capture
  • ✓ Source type

What is NOT stored

  • ✗ Interview transcripts
  • ✗ Link between knowledge ↔ person
  • ✗ Voice recordings
  • ✗ Performance data
Works council compliance

Brainbridge was designed
so that works councils can agree.

Brainbridge collects no performance data, does no behavioural monitoring and creates no personality profiles.

Frequent questions from works councils

Can employees be monitored?

No. Brainbridge collects no performance or behavioural data whatsoever.

Can transcripts be viewed?

No, not even by managers or administrators.

Can employees have knowledge deleted?

Yes. Employees have the right to have stored knowledge deleted at any time.

What we provide

  • Template for a works agreement
  • Technical documentation for the works council and data protection officer
  • Personal meeting with our data protection team on request
  • Enterprise: Individual support for the works agreement
Access rights & data control

You stay in control,
at every level.

Who may see, edit and delete what: you decide. Brainbridge enforces it.

Administrator

Full access · User management · System settings · Audit log

Editor

Approve, edit and structure knowledge

Employee

Run interviews · Retrieve knowledge · Delete own entries

Guest

Read-only access to approved content

  • Audit trail: All access actions are logged
  • Right to erasure: Knowledge fully and securely deleted on request
  • Source reference: Every knowledge unit is linked to its source
  • Content level: Approval of individual topic areas per role
  • SSO / SAML 2.0: Enterprise integration with your identity provider
  • Data export: Full export on request at any time
Deployment options

SaaS or on-premise.
You decide.

Whether you want to start right away or need maximum control: Brainbridge adapts to your infrastructure.

On-premise

Enterprise only · Your infrastructure, your control

  • Installation in your own infrastructure
  • Docker / Kubernetes
  • No data transfer to external servers
  • Compatible with air-gapped environments (with local LLMs)
  • Individual onboarding & setup support
FAQ

Security in detail,
for HR, IT and data protection.

HR

Can employees refuse to take part?

Yes. Brainbridge does not technically enforce participation. We recommend anchoring voluntary participation in the works agreement.

HR

What happens to the knowledge when an employee leaves?

The anonymised knowledge remains in the system, personal metadata is deleted on request.

Data protection

Is a DPA provided?

Yes. The DPA is included in all plans and provided right after the contract is signed.

Data protection

Is data used for AI training?

No, never. This is guaranteed by contract.

Data protection

Where can I find the full data protection documentation?

We provide the privacy policy, DPA and technical and organisational measures on request.

IT

Which authentication options are there?

Email + password, SSO, SAML 2.0 integration.

IT

How is data handled when the contract ends?

On request you receive a full data export. All data is deleted completely within 30 days.

IT

Is there an API?

Yes, a REST API for import, export and integration is available for Enterprise customers.

Questions about security and data protection?

Our data protection team answers every question. Whether for the works council, the data protection officer or IT.

Request a security callFree · No obligation
Get started

Start making your knowledge visible today

Your company holds an enormous amount of knowledge. Brainbridge makes sure it stays.
Accessible, structured and usable by everyone, for good.

Request a demo

No obligation  ·  Tailored to your company  ·  Takes just 30 minutes

How can we help you?

Write to us. We'll get back to you personally.

We only use your details to answer your enquiry. More in our privacy policy (in German).