You are handing BrainDesk read access to your customer data and your billing history. Here is exactly how that access is protected — and what we do not claim.
HTTPS everywhere. OAuth tokens, database credentials, and Stripe keys are encrypted at rest and never exposed to the browser.
Account passwords are hashed with bcrypt. Plaintext credentials are never stored or logged.
Super Admin, Support Lead, and Agent permissions are enforced on every request server-side — the UI is a convenience, not the control.
Authentication, widget, and API endpoints are rate limited to blunt brute-force and abuse.
Monitored continuously, with error tracking and alerting wired in from day one.
Database backups run daily with restore procedures documented and tested.
If one product’s database or mailbox is unreachable, that product degrades in isolation — every other product keeps working.
Every action on a ticket — approval, edit, rejection, escalation, resolution — is appended to a log that cannot be edited after the fact.
We state only the certifications and compliance we actually hold. If a certification is not listed on this page, we do not have it.
GDPR data export and deletion tooling is on the roadmap, per the product spec. Teams with an EU rollout should confirm current status with us before signing.
Request the current security overview →