TheBrain Cloud Security Information #101058

http://thebrain.zendesk.com/agent/tickets/101058

Hello Bill,

Thank you for asking, and thank you also for the very kind note about the latest versions of TheBrain. We really appreciate that, especially coming from someone with your background in UI design and testing. I’m glad to hear TheBrain has become such an important part of your daily workflow.

Regarding security, both TheBrain web client and the native clients for Windows, macOS, iOS, and Android use HTTPS encryption for data transfer.

TheBrain Cloud is hosted on Microsoft Azure. Data stored on TheBrain Cloud, such as file attachments, notes, and images, is stored in encrypted format at rest. File attachments and notes are encrypted using a 256-bit AES cipher, one of the strongest block ciphers available.

Passwords are salted and hashed, so they cannot be viewed by anyone. There is also no facility for administrators to access user Brain content without the user’s login information. Additionally, our services agreement does not permit us to access user data for any purpose beyond providing services to the user.

There are no third-party vendors that have access to data hosted on TheBrain Cloud.

So when you use TheBrain across devices through cloud sync, the data transfer is encrypted, stored content is encrypted on the server side, and account access is protected through your credentials.

Thank you again for the thoughtful question and for the kind words.

Best regards,

John