Trust Center
- Can I see your full Penetration Test Report?
- How do you secure data in a remote environment?
- Does Braindate use AI and is it secure?
- What is your data retention policy?
- Where is my data hosted?
Risk Profile
We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.
Product Security
We pay great attention to enterprise features such as access control and single sign on. We are happy to provide more details about our enterprise features upon request.
Data Security
We follow industry best practices for data security. We are happy to provide more details about our data security practices upon request.
App Security
We take application security seriously and are putting together a program to monitor internal apps.
Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
We protect our corporate network against external & internal threats.
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
BC/DR
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
Trust Center Updates
Our 2025-2026 SOC 2 Type 2 Report is Now Available!
We are thrilled to announce that our latest SOC 2 Type 2 report for the Braindate platform is now available for review. Covering the observation period from April 1, 2025, to March 31, 2026, this report reflects our unwavering commitment to security and data protection. We are proud to report a Clean Opinion with zero security incidents during the audit period.
You can request access to download the full report directly through this portal. If you have any questions, our security team is always here to help!
Braindate Not Impacted by PHP2Shell Vulnerabilities
On October 21, 2026, Braindate became aware of the PHP2Shell security vulnerabilities. Reputable threat intelligence sources have reported that these vulnerabilities affect the core PHP language runtime and could allow unauthenticated remote code execution on web servers running vulnerable PHP versions (CVE-2026-109618, CVE-2026-109619).
- Recommended reading: PHP Security Advisory, The PHP Group
We want our customers to know that Braindate is not impacted by this vulnerability.
Our investigation supports this assessment:
- PHP is not part of the Braindate platforms. Our products are built mainly on TypeScript and Python. No production service or customer-facing system runs PHP, and no subprocessors have disclosed being impacted at the time of this update.
- No internet-exposed vulnerable assets. Our cloud security platform found no vulnerable PHP on any internet-facing or production workload.
- PHP was present only in our marketing websites, that is hosted on a completely separate environment, without any access to production. Our marketing websites were patched and we didn’t find any evidence of exploitation.
The confidentiality, integrity and availability of the Braindate product and customer data remain unharmed.
We will continue to monitor the situation and will update this post if additional information materially changes this assessment. If you have questions, please contact infosecurity@e-180.com.