Trust Center
Data security and governance, built in.
SuperBrains is built for organisations that answer to regulators. Controls run inside the platform on each request, and the evidence is kept for audit.
Certified SOC 2 Type IIISO 27001ISO 42001
Reports are available under NDA.
- Identity and access.
- SSO through your identity provider, MFA, SCIM provisioning and workspace roles. An agent can reach only the data and tools that the person using it is allowed to reach.
- Data protection.
- Encryption in transit and at rest, per-tenant keys, tenant isolation at the data layer, personal data labelled before any model, zero-retention terms with model providers and no training on customer data.
- AI controls.
- The company AI policy is applied to each request, alongside prompt-injection checks, red-team checks on agent drafts, guardrails per agent and spend limits. If a governance check cannot run, the request stops and the user is told why.
- Oversight.
- Approval steps in workflows, review queues for extracted knowledge and conflicting facts, and agent version history with rollback.
- Audit and evidence.
- Each agent step is recorded with its prompt, context and user. Records are signed and can be exported to your security monitoring.
Principles
- Governance is a precondition for use.
- The enterprise owns its intelligence layer, its data and its audit record.
- A control that cannot run stops the request.
- Data stays where you decide.
Common Questions
- Is our data used to train models?
- No. SuperBrains does not use your data to train any model.
- Where is our data stored?
- In the deployment you choose: SuperBrains Cloud in your chosen region, your cloud, your data centre or an air-gapped site.
- How is data deleted?
- You set the retention periods. Memories can be deleted individually, and expired items are removed automatically.
- Who owns what is built?
- You own your data and the knowledge, memory and skills in your intelligence layer. SuperBrains provides the platform. Application terms are set out in each agreement.
Send us your security questionnaire, and our team will answer it alongside yours.
Request a Security Briefing