Security · Bramble
Bramble.
Security

Security controls for client documents.

Brokers hold some of the most sensitive paperwork in the economy. Bramble is built so that using AI on it does not change who controls it, where it lives, or who signs off on the output.

AWS Canada · ca-central-1 · Encrypted in transit and at rest · No model training on client data · Licensed human approval

Canadian data residency

Everything runs in Canada. Documents are processed in the region they were uploaded to, and nothing is copied out of it for convenience.

HostingAWS Canada
Regionca-central-1 · Montréal
EncryptionTLS 1.2+ · AES-256 at rest
Documents leave CanadaNever

No model training on client data

Your documents are used to answer your questions and nothing else. They are not used to train or fine-tune models, and they are not pooled across brokerages. Retention windows are set by you.

Licensed staff approve every output

Bramble never sends documents to your clients. A licensed staff member reviews and issues every certificate, comparison, and answer that leaves the brokerage. The tool prepares; a person decides.

Audit logs and source citations

Every extraction, comparison, and edit is timestamped and attributed, with the verbatim source quote attached. When an E&O question comes back years later, the file already answers it.

09:14Extraction complete: 28 line items, sources cited
09:16Gap flagged: TLL $250K vs $1M on expiring
09:21Table edited by A. Morrow
09:24Excel downloaded, copied to client email

User access controls

Named accounts per user, role-based permissions per case, and immediate revocation when someone leaves. SSO for brokerages that require it. Ask us for the current security questionnaire, subprocessor list, and DPA. We send them in full, unredacted.

Security review questions

Which models do you use, and where do they run?

Bramble uses commercial frontier models under enterprise agreements that prohibit training on submitted content, invoked from our Canadian infrastructure. We will name the current providers under NDA during procurement.

Can Bramble issue a certificate on its own?

No. Bramble prepares the document and stops. Issuance requires a licensed person to review and approve, including in the roadmap features that write into your BMS.

What happens to a document after we are done with it?

You choose the retention period per brokerage. Deletion removes the document and its extractions; the audit record of who did what remains, without the underlying file.

How is accuracy measured?

Every value is returned with a verbatim quote so your team can verify it in seconds. On adversarial test policies Bramble reached 100% recall with zero false positives, and the citation means you never have to trust a number blind.

Send us your security questionnaire.

We answer it in full, and we will walk your compliance lead through the architecture on the same call as the demo.