Trust & Security
01—07
Your approved truth, handled accordingly.
Brandspace holds what your organisation has decided is true about itself. This page explains plainly where that material lives, who can reach it and how AI touches it.
01
Where your data lives
Accounts, structured brand content and uploaded files are held with our cloud infrastructure provider in the EU (Ireland).
- Brand content, people, roles and history are stored in a dedicated database.
- Documents, logos, images and fonts are kept in private storage — never on public links.
- Data is encrypted in transit and at rest, and covered by the provider's backups.
02
How each Brandspace is isolated
Access is decided by the database itself, not by what the interface chooses to show.
- Every read and write is checked against your membership of that specific Brandspace.
- Knowing a link, a name or an ID never grants access on its own.
- Files can only be fetched by members, through short-lived signed access.
03
How AI is used
Brandspace may clarify and structure. It may never invent facts, strategy or claims.
- When you start an analysis — importing a document or website, or generating AI Context — the material is sent to the named model providers below to perform that task.
- When a connected assistant reads your Brandspace, Brandspace makes no AI calls of its own. It returns approved content only, to the client you chose to connect.
- Each connection is scoped to exactly one Brandspace and every read is logged.
- Connected assistants can only add drafts for human review — never approve, overwrite or delete.
04
Who has access
Roles are explicit, and support access is disclosed rather than hidden.
- Owner, Admin, Editor and Viewer roles control who can read, edit and approve.
- Brandspace operators can open a Brandspace to provide support. Every such access is recorded in a separate audit log.
- Operator access never creates a membership and never weakens isolation between customers.
05
You own your data
Your brand material is yours. We hold and structure it to run the service.
- Export everything as a single download at any time.
- Delete a Brandspace with a 30-day grace period, or permanently right away.
- Deleted data disappears from the service immediately; it remains in backups until they expire.
06
Subprocessors
| Provider | Role | Data reached |
|---|---|---|
| Cloud infrastructure | Database, sign-in and private file storage | All customer data |
| AI gateway | Routes analyses you start to model providers | Material submitted for that task |
| OpenAI (via gateway) | Model provider | Material submitted for that task |
| Google (via gateway) | Model provider | Material submitted for that task |
| Email delivery provider | Invitations and account email | Recipient address and message |
07
Data processing agreements and questions
Brandspace is in private beta. Formal terms and a data processing agreement are being prepared. If your organisation needs one, or has questions about anything on this page, write to hello@brandspace.se. Read our privacy policy.