Browse this section
Security & privacy

Compliance & legal

GDPR, contracts and the documents available for your review.

GDPR

We act as processor for customer content and as controller for account and website data. Our Data Processing Agreement is part of every paid plan and includes the sub-processor list, breach notification terms, assistance with data subject requests and audit rights. Our Privacy Policy covers data we control.

EU AI Act

The platform is a general-purpose tool configured by customers. We support customers' obligations with transparency (citations, traces), human oversight (approvals, hand-offs, emergency stop) and logging. Guidance for customers deploying agents in regulated processes is available on request.

Documents available

  • Security overview and architecture description
  • Data Processing Agreement and sub-processor list
  • Penetration test summary (under NDA)
  • Business continuity and incident response summaries
  • Completed security questionnaires (CAIQ, SIG Lite) on request

Request documents at security@brewmycode.com.

Contracts

Enterprise customers can contract on their own paper or on our master agreement with service levels.