Data Processing
1. Roles
When your organisation uses the Brayns platform, your organisation is the controller of the personal data in its compliance work and Brayns AB, org.nr 559539-6325, Birger Jarlsgatan 32, 114 29 Stockholm, Sweden acts as processor, processing personal data only on documented instructions under a data processing agreement.
2. Scope of processing
Processing is limited to what is necessary to provide the platform: running your procedures, working your cases, and maintaining the record your organisation relies on.
3. On-premises by default
The platform is deployed on-premises, inside your organisation's own perimeter. Customer data does not leave that perimeter to be processed by Brayns except where your agreement expressly says otherwise.
4. No training on customer data
Brayns does not train models on your customer data or case content. Deployment inside your perimeter is designed to make this verifiable, not merely promised.
5. Security
We maintain technical and organisational measures aligned with the standards listed in our Trust section, including certified information-security and privacy-information management, and we support your own audits as agreed.
6. Subprocessors
Where subprocessors are used for the website or for support tooling, they are bound by equivalent data-protection obligations. A current list is available on request and will be published on this page.
7. Deletion
On termination of an agreement, customer data within Brayns systems is returned or securely deleted within agreed timelines, and deletion inside your own perimeter remains under your control.
8. Contact
Data-protection questions can be sent to contact@brayns.ai.