Third Party Index

Snapshot 21540

Document
Trust center
URL
https://branco.ai/security/
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
111566 bytes
SHA-256 (raw)
0511976e8daeea5c03271d1852b52e41fa02f81d6738159631a338f560277d8c
SHA-256 (normalized text)
03d9c6231204cb424116cf28f0b784990f02690076d2adc32cd17c9b0c349bb4

Normalized text

Scripts and page chrome removed; this is what change detection compares.

SOC 2 Type II Certified
Branco has completed an independent SOC 2 Type II audit covering security, availability, and confidentiality. The audit is conducted annually by a third-party auditor. Our full report is available to enterprise customers on request through our Trust Center.
Full documentation in our Trust Center
Sub-processors, DPA, security controls, audit summary, and compliance documentation — all in one place.
Visit Trust Center →
How we protect your data
Three pillars: enterprise infrastructure, strict data isolation, and layered access controls.
🏗
Infrastructure
Hosted on Kinsta with Cloudflare CDN and WAF in front. Data encrypted at rest (AES-256) and in transit (TLS 1.2+). Daily automated backups with point-in-time recovery. Uptime monitored 24/7.
🔒
Data isolation
Per-tenant architecture — your data never mingles with another company's. No cross-tenant data flows. No shared embeddings or aggregate models built on customer content. Full data export available at any time via API or CSV/JSON.
🔐
Access controls
SSO/SAML supported. Role-based access control (RBAC) with least-privilege defaults. MFA enforced for admin accounts. All agent on/off toggles are SSO-gated. Every API call logged with tenant ID and request ID.
AI inference & data practices
Branco uses AI inference — not training — on your data. We run third-party inference providers (currently Google Vertex AI) under contracts that prohibit training on Branco-submitted prompts, operate in zero-retention mode, and maintain tenant-isolation guarantees.
We do not fine-tune, RLHF, or build proprietary models on customer content. Your text is used to produce a result for you, then discarded at the inference layer. The score or suggestion is stored; the raw prompt is not retained in inference logs.
If you turn off Branco's AI agents, the platform continues to operate — cycles, calibration, reviews, and action plans all run without AI. See our full AI Commitments →
Policies & documents
Privacy Policy
Terms & Conditions
AI Agent Commitments
Trust Center (Mycroft)
Data Processing Agreement (DPA) available on request — email privacy@branco.ai.