Security & Compliance Overview

Infrastructure & data protection

B2Brain is hosted on AWS US-East, with single-tenant database options available for enterprise customers. Data is encrypted at rest at the field level and in transit via TLS 1.3. SOC 2 Type II certification is currently in progress.

Privacy

B2Brain is built to align with GDPR and CCPA. Consent is captured at the point of badge scan, retention windows are configurable by your admin, and subject access requests can be handled with one click. Voice notes are redacted and transcripts are purged on a schedule you control.

Access control

B2Brain supports SSO through Okta, Azure AD, and Google Workspace, along with SCIM provisioning for automated user management. Every capture, edit, and CRM sync is logged in a full audit trail that can be exported for your compliance team.