How we handle your data

An independent auditor reviews how we build software and handle day-to-day operations. We're ISO 27001 certified, and we renew it every year. That covers everything from how we handle code changes and access to production, to how we onboard new team members and respond to incidents. It's not a badge we hang on the wall. It shapes how we actually work.

Everything is encrypted. Data in transit, data at rest, every connection between Brightmotive, your systems and your customers' browsers. We use TLS for all connections and AES-256 for data at rest. There's no way to access Brightmotive over an unencrypted connection, and there never will be.

Every customer gets their own dedicated database. Your data is completely separated from other customers, not shared in one big database with everyone else. If another customer imports a massive catalogue or runs heavy operations, it won't affect your performance. And if something goes wrong, we can restore your data independently without affecting anyone else.

All data is stored and processed in AWS data centres in Frankfurt, Germany. Your data stays in the EU. AWS is SOC 2 Type 2 accredited and ISO 27001 certified. If you need to demonstrate GDPR compliance or answer questions from your customers about where data lives, the answer is simple: Frankfurt, nowhere else.

Role-based permissions let you control exactly who can see and do what. You decide who can edit pricing, who can view order history and who only gets access to specific parts of the catalogue.