Your Data is Protected
We take security seriously. Learn about our comprehensive measures to protect your construction data and ensure privacy across all BrieXO platforms.
Enterprise-Grade Security
Built with security at its core, BrieXO meets the highest industry standards
Encryption In Transit & At Rest
All data is encrypted in transit (TLS) and at rest using AES-256 encryption standards.
Security Governance Controls
Documented controls, access reviews, and continuous security improvement practices.
Multi-Factor Authentication
Required MFA with support for SAML/SSO integration for enterprise accounts.
Secure Cloud Infrastructure
Hosted on Hetzner in the EU with security monitoring and availability practices reviewed as part of rollout.
Access Controls
Granular permissions and role-based access controls for team management.
Audit Logs
Complete activity tracking and audit trails for compliance requirements.
Compliance Standards
Supporting privacy, security, and compliance review workflows
Privacy controls and data-processing review support
Evidence-readiness posture with an internal SOC 2 evidence pack maintained for enterprise review
Privacy request and data-handling process support
UK Data Protection Act 2018 alignment for construction records
Privacy Principles
Data Minimization
We collect only the data necessary to provide our services and improve your experience. No unnecessary information is stored or processed.
Transparency
We're transparent about what data we collect, how it's used, and who has access to it. Our privacy policy is written in clear, understandable language.
User Control
You have full control over your data. Export, delete, or modify your information at any time through your account settings.
No Selling of Your Data
Your construction data is never sold. It is processed only by the vetted sub-processors that run the service (see our sub-processor list), and used only to provide and improve our services to you.
Security Questions?
Our security team is here to address any concerns and provide detailed information about our security practices.