Platform · Security & tenancy

One customer, one tenant. Nothing shared.

Every Brisc customer runs in a dedicated Microsoft Azure tenant with its own database, its own storage, and its own key vault; there is no shared fallback. Your data never trains shared models.

Your identity, your control
your Entra SSOyour allowlistyour policies
↓ federated sign-inmanaged identity only ↓
Your dedicated Azure tenant
own databaseown storageown key vault
no shared fallbackfails closed
Isolation

What does per-tenant isolation actually mean?

Not a shared database with your rows filtered out. Dedicated infrastructure, provisioned per customer, that fails closed rather than falling back.

Dedicated database

Your records live in a database that exists only for you, no co-tenants.

Dedicated storage

Every document you send sits in storage provisioned for your tenant alone.

Dedicated key vault

Your secrets and encryption keys are held in your own vault, not a shared store.

No shared fallback

If a tenant resource is unavailable, the platform fails closed; there is no shared environment to land in.

Identity & access

No keys in the data path.

The data plane runs on Azure managed identities only: no keys or connection strings between services, nothing to leak or rotate late. Sign-in federates through your own Entra SSO, in production across multiple tenants today.

Managed-identity-only data plane. Services authenticate as themselves; secrets never travel.
Database local auth disabled. No username-and-password path into your data.
Customer-controlled allowlist. Your admins decide who can reach the tenant at all.
Role-based access inside. By team, geography and submitter, so people see the work that is theirs to see.
AI posture

Your data never trains shared models.

What the platform learns from your corrections stays in your tenant and belongs to your book. No customer data improves a model anyone else uses; the mechanism: accuracy and audit.

Compliance

Give your security team the evidence.

SOC 2 Type II, GDPR and CCPA compliant. The control set, policies and documentation live at trust.brisc.ai, built for the security review, not around it.

SOC 2 Type II. Controls documented at trust.brisc.ai.
GDPR and CCPA compliant. Data-subject rights and processing terms documented.
Exportable audit trail. Reviewer identity and lineage on every record, handed over in full.
trust.brisc.ai. The living home of the posture: start your review there.
The platform

Security is one property of one engine.

The same engine that isolates your tenant does the work: the shared platform, accuracy and audit, and how files get in and out.

Common questions

Questions security reviewers ask us

Where does our data live?

In a dedicated Microsoft Azure tenant that is yours alone: its own database, its own storage, its own key vault. There is no shared environment underneath and no shared fallback to land in. Brisc is SaaS on Azure, one tenant per customer.

Does our data train AI models?

Never shared ones. What the platform learns from your corrections, rules, prompt tuning and confirmed aliases, stays inside your tenant and belongs to your book. No customer data trains models used by anyone else.

How do our people sign in?

Through your own Entra SSO. Access federates from your identity provider under your policies, with a per-tenant allowlist your administrators control. This is in production across multiple tenants today.

What credentials sit in the data path?

None. The data plane runs on Azure managed identities only: database local authentication is disabled and there are no keys or connection-string secrets in the path between services.

Is Brisc SOC 2 and GDPR compliant?

SOC 2 Type II, GDPR and CCPA compliant. The full control set, policies and documentation are available for your security team at trust.brisc.ai.

Is Brisc a shared multi-tenant SaaS?

No. Brisc is SaaS on Microsoft Azure with a dedicated tenant per customer. Not a shared database with your rows filtered out: dedicated infrastructure, isolated by design, failing closed rather than falling back.

Bring your security team. We like the hard questions.

Start at trust.brisc.ai, then put your reviewers in the room with ours. The isolation model is simpler to defend than to describe.

Book the walkthrough