Our Commitment to Your Data Security
We pledge to maintain the highest standards of data protection and transparency. Your trust is fundamental to everything we do, and this pledge outlines our commitment to safeguarding your information.
Core Security Principles
1. Complete Data Control & Ownership
Your data remains yours: We never claim ownership of your event or attendee data.
Your data is separated from every other customer's: Access is scoped to your organization at every layer. Requests can only reach data belonging to the organization they authenticate against.
ISO 27001 certified: Brella’s processes and systems undergo rigorous annual audits in line with internationally recognized standards.
2. Privacy-First AI Development
We never train generative AI models on your data: Not ours, and not those of any provider we use. This is a commitment in our Organizer Terms rather than a setting, and every sub-processor is bound by the same restriction.
Model providers cannot learn from your data: Where an AI feature sends data to a language model, our agreement with that provider prohibits using it for training, fine-tuning, or evaluation, and prohibits retaining it beyond what is needed to return the response.
Improvements come from anonymized data only: When we develop and evaluate the Service, we work from data that can no longer identify anyone, and we do not attempt to re-identify it.
3. Complete Organizer Control
Generative AI features are optional: Any generative AI feature that requires sending data to an LLM is optional. Event organizers have full control to enable or disable these features for their events.
No surprises: Generative AI features will never be automatically enabled without explicit organizer consent.
4. Data Minimization & Purpose Limitation
Collect only what's needed: AI features will only access the minimum data required for their specific function.
Time-limited processing: Data sent to a language model is used to produce that response and is not retained afterwards for any other purpose.
No secondary use: Data collected to run one part of the Service is not repurposed for anything else.
Our Ongoing Commitment
This pledge is a living commitment that evolves with technology and regulations. We pledge to:
Stay current: Continuously update our practices to meet or exceed emerging AI governance standards.
Listen actively: Maintain open channels for feedback and concerns about our AI features.
Act responsibly: If we cannot meet these security standards for a particular AI feature, we will not release it.
Communicate proactively: Notify users promptly of any significant changes to our AI data practices.
Questions or Concerns?
Your trust matters to us. If you have any questions about our AI security practices or would like to exercise your data rights, please contact our dedicated team at dpo@brella.io.
