Data processing agreement
Brainstack acts as your processor under GDPR. The agreement lists what we process, where and with whom.
Read the DPAYour company's data, on a server of its own.
Brainstack gives every company its own private server, with its own database, its own vault for passwords and encrypted backups every 6 hours. No other company's agents run on it, and nothing leaves without the approvals you set.
Your own private server
Encrypted backups every 6 hours
GDPR data processing agreement
Your serverOnly your company
What this part does
Your agents
They work on your server, on your schedule. Each run happens in its own sealed session, so one task can't read another's files.
- Only the tools you connected
- Sending, paying and deleting wait for your yes
Company brain
Every client file, decision and source the brain keeps is stored on this server, in your own database.
- Permissions per person and per space
Your own database
A PostgreSQL database that holds only your company. Connections to it are encrypted, even inside the server.
- No shared tables with other customers
The vault
The logins and tokens for Gmail, HubSpot or Stripe are kept encrypted in a vault on your server, apart from everything else.
- Never pasted into a chat
Files
What your team uploads and what agents produce, from PDFs to reports, sits in your server's own file store.
One door out
Agents reach the internet through one gateway that only opens to the tools you connected. Everything that goes out passes the same door.
Other companies
Each customer has a separate machine with its own keys, its own database and its own chat bot. Nothing is shared between them.
Encrypted backups
A copy is encrypted on your server every 6 hours, signed and sent to separate storage. Your server can write copies but can't read or delete them.
Tap any part of the server
Most AI tools share one server. Yours doesn't.
In a shared app, every customer sits in the same database. With Brainstack, your company gets a machine of its own.
One server for everyone
Northwind
Bluebird Co
Your company
N
Y
B
N
Y
B
N
Y
B
Y
One database and one set of keys for every customer. A bug or a leaked key can touch all of them.One server per company, each with its own keys. A problem in one stays in that one.
- Your own database and file store
Nothing of yours sits in a table next to another company's.
- Your own vault and keys
The keys that open your data are made for your server and live on it.
- Your own bot and apps
Telegram, Slack and Discord connect through your company's own bot, not one shared by every customer.
A server of your own. Honest about the rest.
Your company gets a private server that no other customer touches. Here is exactly what stays there and what goes out, and why.
Stays on your server
- The company brain
Client files, decisions, sources and knowledge spaces.
- Passwords and tokens
In the vault, encrypted, apart from the rest.
- Files and conversations
Uploads, generated documents, chat history and the activity log.
Goes out, only when needed
- To your AI provider
What an agent or a person sends to Claude, ChatGPT or Gemini is processed by that provider, under the terms of your plan with them.
ClaudeChatGPTGemini - To the tools you connected
An email to Gmail, an invoice to Stripe, a message to Slack. Only after the approvals you set.
GmailStripeSlack - Encrypted backups
Encrypted before they leave, so the storage only ever holds sealed copies.
Passwords live in a vault. Not in a chat.
You connect a tool once and its login goes into the vault. Agents use the connection when a job needs it. Tap a connection to follow one use.
Vault
A copy every 6 hours. A restore test every month.
Each copy is encrypted before it leaves your server and signed, so a restore can prove it's yours and that nothing is missing. Tap any copy.
Last 24 hours
14:17
Encrypted, signed
Frequent, kept 2 daysDaily, kept 14 daysMonthly, kept 1 year
Monthly restore test
PassedOnce a month a fresh copy is restored as a test and every table is counted against what was saved.
Encrypted before it leaves
The key that opens a copy is never on your server, so the copy is useless to anyone who finds it.
Can't be erased from inside
Your server can add copies but has no key that deletes them. Storage keeps each copy for its full period.
Signed and counted
Each copy carries a signature and a count of every table, so a restore proves it got everything.
Everyone sees their part. Nobody sees it all by accident.
Set access per person and per space. The same rule applies to their agents and to the AI they plug in.
| Space | Access | What their AI and agents can use |
|---|---|---|
| Clients | OpenRead onlyHidden | |
| Finance | OpenRead onlyHidden | |
| Playbooks | OpenRead onlyHidden | |
| Team and payroll | OpenRead onlyHidden |
Every action, on the record.
Who did what, when, and who said yes. People and agents land in the same log, and you can export it whenever you need it.
08:02Billing agentSent invoice #1043 to Northwind, $4,200Approved by Anna
08:40YOYouGave Leo read-only access to ClientsOwner action
09:15Support agentRead the returns policy to answer Bluebird CoRead only
10:30Inbox agentReplied to Brightline Studio about ThursdayApproved by you
11:05LELeoAsked from ChatGPT about the Northwind renewalWithin Sales access
12:20Marketing agentPost for Thursday held, waiting for reviewWaiting for you
13:48ANAnnaRaised the invoice approval limit to $3,000Admin action
Nothing leaves without your yes.
You decide, per agent, what needs a person: sending, publishing, paying, deleting, or any amount above a limit.
- Email replies wait for approval by default.
- Amounts above your limit always ask first.
- Anything nobody decides is dropped after 7 days.
Billing and collections
Needs your yesInvoice #1043 for Northwind is ready: $4,200. Send it?
Above your $3,000 limit, so it waits for you. Sent. Logged with your name. Held. Nothing was sent.GDPR, in writing. Your exit, too.
A data processing agreement on every plan, a full export whenever you ask, and a clean exit if you leave.
Export everything
Download a readable export of your workspace through a private link that expires after a short time.
Leave cleanly
When you cancel, you get your export first. After the grace period, the server, its firewall and its address are deleted.
Who else touches your data
| Company | What for | Where |
|---|---|---|
| Hosting provider | Your private server, used only by your company | Close to your company, in the US or Europe |
| Amazon Web Services | Encrypted backups (sealed copies only) | Separate storage, sealed before it leaves |
| Stripe | Billing | Per Stripe's terms |
| Your AI provider | What agents and people send it, under your plan | Per your plan's terms |
Questions, answered.
Where does my data live?
On a private server that only your company uses. Your database, your vault and your files live there, apart from every other customer. We place it close to your company, in the US or in Europe. Encrypted backups go to separate storage. Your AI provider processes what an agent or a person sends it, under the terms of your plan with them.
Do you have SOC 2 or ISO 27001?
Not yet. What we do have today: one server per customer, a vault for passwords and tokens, encrypted and signed backups with a monthly restore check, permissions per person, approvals before anything leaves, an activity log and a data processing agreement under GDPR.
Does Brainstack train AI models on my data?
No. Brainstack does not train any model. Agents use the Claude, ChatGPT or Gemini plan your company already has, and what that provider does with what it receives is set by your plan with them.
Can other customers reach my data?
No customer shares your server, your database, your vault or your chat bot. Each company runs on its own machine with its own keys, and backups of each server are encrypted and stored apart.
How often is my server backed up?
A copy every 6 hours. Each copy is encrypted before it leaves the server and signed so a restore can prove it is yours and complete. Frequent copies are kept for two days, daily copies for two weeks and monthly copies for a year. Once a month a copy is restored as a test and every table is counted.
Can agents send or pay without me?
Only what you allow. Sending, publishing, paying and deleting can each require your approval, and amounts above a limit you set always wait for a yes. Email replies wait for approval by default.
Can I take my data with me?
Yes. You can download a readable export of your workspace through a private link that expires. When you cancel, you get the export first, and your server is deleted after the grace period.
Do you sign a data processing agreement?
Yes. Every plan includes a data processing agreement under GDPR. Our privacy policy lists every sub-processor: the hosting providers that run your server, AWS for encrypted backups, Stripe for billing, and the AI provider you choose.
Your next hire is an AI agent. On your own server.
Every plan comes with its own private server. From $99 a month, plus the AI plan your company already pays for.