Your data stays yours
TenderBrain is designed for a responsible and secure use of generative artificial intelligence in business.
Responsible use
A Tool that enables responsible use of company data, in a secure generative AI context.
Company perimeter
Your documents and queries remain within your perimeter: Tender Brain never accesses your data.
EU infrastructure
Servers and data centers on Google Cloud Platform or Scaleway, entirely within the European Economic Area.
No training
Uploaded documents are never used to train third-party AI models.
With the Business package, deployment happens directly in the Client’s own cloud: data never leaves the company perimeter, not even on Tender Brain’s servers.
Security and Compliance
TENDER BRAiN is designed to be secure and private. In its standard distribution it uses the features Google Cloud Platform provides to ensure the security of code, pipelines and data.
Prompt Guard
Advanced protection against prompt injection attacks.
WAF
Google Cloud Platform’s Cloud Armor protects against DDoS attacks and other web attacks.
Ops
People authentication via Google Account with MFA. Developer and system administrator disks are encrypted.
Security Command Center
Infrastructure, software and containers under continuous analysis by Google Cloud Security Command Center.
Audit and Logs
All software operations, from development to maintenance, are audited and logged.
Authentication, encryption and continuity
Authentication and access
Login via username and password or SSO, MFA, API-Key for programmatic access. Employee access follows the least-privilege principle, with separate production and non-production environments.
Data encryption
Encryption of data in transit and at rest across all production datastores, disk encryption on company devices.
Continuity and resilience
Recovery plan in case of disruption, continuous system monitoring, anti-malware and intrusion detection solutions.
GDPR compliance
Tender Brain acts as Data Processor under Article 28 of the GDPR, with a Main Data Processing Addendum (MDPA) that any Client can sign, which regulates in detail the processing operations, the security measures adopted and the list of sub-processors involved.
All contractual details and technical and organizational measures are available in the complete
Main Data Processing Addendum
.
Any other questions about data security?
Talk to one of our experts