Security
brainattic is built and run on infrastructure FSS controls inside the European Union. Customer data is processed and stored in Bulgaria (EU), hosted in a Sofia colocation data centre (Telepoint EAD — the physical facility only, with no logical access to your data) and reached over connectivity from A1 Bulgaria.
How we protect your data
- Encryption in transit (TLS) for all access.
- Role-based, least-privilege access and administration.
- Logical isolation of each customer tenant.
- Network segmentation — segmented, firewalled internal networks; FSS operates its own network estate and authorisation server.
- An append-only audit log that captures operational and security metadata — not the content of your documents or AI prompts.
- Regular backups on FSS-controlled infrastructure in the EU.
- No third-party logging or analytics processors. Your workspace data leaves the EEA only through an optional integration you choose to enable (for example, Slack reminder DMs); the limited exceptions — such as the reCAPTCHA protection on our public forms — are described in the “International transfers” section of the Privacy Policy.
Standards
Our practices follow the ISO/IEC 27001 (information security), ISO/IEC 20000 (IT service management), and ISO 9001 (quality) standards — part of how FSS has built and operated software for years.
Learn more
For the full detail of what we process, who else is involved, and how long we keep it, see our Privacy Policy and Data Processing Agreement. Report a suspected vulnerability through our security.txt contact; privacy enquiries go to privacy@brainattic.ai, and product help is at Support.