Your trust is our foundation.
We know you are entrusting us with your most valuable data.
Your employees' knowledge.
- GDPR-compliant
- Hosted in Germany
- Works council compliant
- No AI training with customer data
- AES-256 encryption
Your data in Germany.
The platform runs without detours via foreign servers.
The Brainbridge platform runs exclusively on servers in Germany. Your company data never leaves the EU.
Technical details
| Platform server location | Germany |
| Storage of your data | Exclusively within the EU |
| Encryption (at rest) | AES-256 |
| Encryption (in transit) | TLS 1.3 |
| DPA | Included once the contract is signed |
| AI training with customer data | Never |
- Art. 6 GDPR: Processing only on a legal basis
- Art. 28 GDPR: Data processing agreement (DPA) included
- Art. 32 GDPR: Technical and organisational measures documented
- No AI training with customer data guaranteed by contract
- Right to erasure: Full data export and secure deletion on request
For this website, the information in our privacy policy applies.
Secure knowledge
without monitoring people.
Brainbridge is not a monitoring tool. Transcripts cannot be viewed.
- Transcripts cannot be viewed Not even by administrators
- Anonymised storage Knowledge is not stored by person
- No performance monitoring No analysis by employee
- No profiling No personality profiles
- Right of withdrawal Employees can have secured knowledge deleted
What is stored
- ✓ Knowledge units (anonymous)
- ✓ Topics & clusters
- ✓ Time of capture
- ✓ Source type
What is NOT stored
- ✗ Interview transcripts
- ✗ Link between knowledge ↔ person
- ✗ Voice recordings
- ✗ Performance data
Brainbridge was designed
so that works councils can agree.
Brainbridge collects no performance data, does no behavioural monitoring and creates no personality profiles.
Frequent questions from works councils
Can employees be monitored?
No. Brainbridge collects no performance or behavioural data whatsoever.
Can transcripts be viewed?
No, not even by managers or administrators.
Can employees have knowledge deleted?
Yes. Employees have the right to have stored knowledge deleted at any time.
What we provide
- Template for a works agreement
- Technical documentation for the works council and data protection officer
- Personal meeting with our data protection team on request
- Enterprise: Individual support for the works agreement
You stay in control,
at every level.
Who may see, edit and delete what: you decide. Brainbridge enforces it.
Administrator
Full access · User management · System settings · Audit log
Editor
Approve, edit and structure knowledge
Employee
Run interviews · Retrieve knowledge · Delete own entries
Guest
Read-only access to approved content
- Audit trail: All access actions are logged
- Right to erasure: Knowledge fully and securely deleted on request
- Source reference: Every knowledge unit is linked to its source
- Content level: Approval of individual topic areas per role
- SSO / SAML 2.0: Enterprise integration with your identity provider
- Data export: Full export on request at any time
SaaS or on-premise.
You decide.
Whether you want to start right away or need maximum control: Brainbridge adapts to your infrastructure.
SaaS
Ready to use immediately
- Dedicated cluster in Germany
- AES-256 encryption at rest
- TLS 1.3 in transit
- Automatic updates & security patches
- 99% availability SLA
On-premise
Enterprise only · Your infrastructure, your control
- Installation in your own infrastructure
- Docker / Kubernetes
- No data transfer to external servers
- Compatible with air-gapped environments (with local LLMs)
- Individual onboarding & setup support
Security in detail,
for HR, IT and data protection.
Can employees refuse to take part?
Yes. Brainbridge does not technically enforce participation. We recommend anchoring voluntary participation in the works agreement.
What happens to the knowledge when an employee leaves?
The anonymised knowledge remains in the system, personal metadata is deleted on request.
Is a DPA provided?
Yes. The DPA is included in all plans and provided right after the contract is signed.
Is data used for AI training?
No, never. This is guaranteed by contract.
Where can I find the full data protection documentation?
We provide the privacy policy, DPA and technical and organisational measures on request.
Which authentication options are there?
Email + password, SSO, SAML 2.0 integration.
How is data handled when the contract ends?
On request you receive a full data export. All data is deleted completely within 30 days.
Is there an API?
Yes, a REST API for import, export and integration is available for Enterprise customers.
Questions about security and data protection?
Our data protection team answers every question. Whether for the works council, the data protection officer or IT.
Start making your knowledge visible today
Your company holds an enormous amount of knowledge. Brainbridge makes sure it stays.
Accessible, structured and usable by everyone, for good.
No obligation · Tailored to your company · Takes just 30 minutes
Thank you!
Your message has reached us. We'll get back to you personally.