Privacy policy

Privacy and Security

Privacy policy

Privacy and Security

At Brilliant Future, trust, privacy and information security are fundamental parts of our business and product development.

As data processor, we handle personal data exclusively in accordance with our customers' documented instructions and in compliance with applicable data protection legislation, including GDPR.

We develop our products with data protection and security as a foundation. We apply technical and organizational security measures to ensure confidentiality, integrity, and availability at every level. We have established an Information Security Management System (ISMS, ISO/IEC 27001) as a framework for how we secure your data. Brilliant Future ensures that your data is safe.

Structured information security across all parts of the organization

Established ISMS according to ISO/IEC 27001

GDPR and regulatory compliance

Technical and organizational security measures

built-in

Secure management and data classification

We ensure that your data is handled securely

Modern and secure architecture

Technical safeguards, cutting-edge platform to ensure compliance, performance and security

Secure

SDLC

Senior engineering team, cross team governance, automation and security testing, regular vulnerability and penetration testing.

Incident management and continuity

If the worst should still happen, clear process and responsibilities for managing incidents and continuity

Anonymity by design

Anonymity embedded in the reporting logic of the platform

Pseudonymization and

data isolation

Data isolation in multi-tenant architecture. Pseudonymized and strong encryption of personal data.

Training and awareness

Continuous training of our staff on information security, legal requirements, and internal processes

 

Read more about security and data processing in our trust center,  here.