Security at Brinker
Brinker is committed to the security and privacy of our customers’ data.
ISO 27001
GDPR
SOC 2 · in progress
ISO 27001 certified
Brinker’s information security management system is certified to ISO/IEC 27001:2022 and audited by an independent certification body. The certificate is available on request.
Data protection
Robust measures to protect sensitive information and meet the standards our government, NGO and enterprise clients expect.
Data at rest
All datastores are encrypted at rest with AES-256.
Data in transit
TLS 1.2 or higher everywhere data moves over a network.
Data backup
Daily encrypted backups with tested restores.
Security controls
Robust measures to protect sensitive information and meet the standards our government, NGO and enterprise clients expect.
Infrastructure security
Web application firewall deployed
Threat detection and vulnerability scanning in place
Production and non-production environments separated
Encryption key access restricted
Product security
Penetration testing performed
Dependency and container scanning on every deployment
Secure development lifecycle followed
Access control
Single sign-on and multi-factor authentication enforced
Role-based access control applied
Customer data logically isolated per client
Access reviews conducted
Organizational security
Security awareness training for all employees
Endpoint protection on every company device
Incident response plan established and tested
Business continuity and disaster recovery plans in place
Responsible disclosure
If you believe you have found a security vulnerability, please report it to security@brinker.ai. We will acknowledge your report and keep you informed as we investigate.
FAQ
Is Brinker ISO 27001 certified?
Yes. Brinker holds ISO/IEC 27001:2022 certification. The certificate is available on request.
Is Brinker SOC 2 compliant?
A SOC 2 Type II audit is in progress.
Where is data stored?
Production data is hosted in the United States. Encrypted backups are kept in the European Union.
Is customer data used to train AI models?
No. Neither Brinker nor our subprocessors use customer data to train or fine-tune models