Request for Detailed Technical and Data Governance Clarification – Cerebro (TheBrain 15) #99671

https://thebrain.zendesk.com/agent/tickets/99671

Hello Jose,

Thank you for your detailed questions. I appreciate the level of diligence given your professional environment. I will address your points directly.

1. Processing Architecture

Cerebro can operate in two modes depending on configuration:

• Remote AI mode – where requests are processed by external AI providers selected within TheBrain.

• Local AI mode – where Cerebro is configured to use a locally hosted AI server under your control.

Cerebro only accesses content that you explicitly authorize. When an action requires access to notes, attachments, or other content, the application prompts for permission before proceeding.

2. Data Retention and Storage

If a Brain is synced to TheBrain Cloud, Brain data is stored on Microsoft Azure infrastructure.

All stored data is encrypted using 256-bit AES encryption.

AI providers do not have direct access to stored Brain databases. When Remote AI mode is used, only the content required to fulfill a specific request is transmitted for processing.

3. Model Training and Usage

Content processed via Remote AI mode is not used by TheBrain for model training.

External AI providers operate under their own enterprise data handling agreements. We can provide additional clarification on provider data usage policies if required for your evaluation.

4. Third-Party Providers

Cerebro supports integration with external AI providers, including OpenAI and Anthropic, with additional providers planned.

The specific provider used depends on configuration.

5. Encryption and Security Controls

• Cloud infrastructure: Microsoft Azure

• Data encryption: 256-bit AES

I am attaching our “Commitment to Your Privacy and Security” document for additional detail regarding our security posture and data governance approach.

If you require formal compliance documentation, such as SOC reports or a Data Processing Agreement, please let us know and we will coordinate with the appropriate team.

6. Granular Control

Cerebro can be disabled entirely.

AI behavior and permissions can be configured within AI Settings.

When operating in Local AI mode, no external AI processing is required.

7. Enterprise / Confidential Use

For regulated or highly confidential environments, Local AI mode is the recommended configuration, as it avoids external AI processing.

If you require formal architectural documentation or contractual safeguards for regulated industries, please let us know and we will escalate your request accordingly.

To help us provide the most precise documentation, please clarify:

• Whether you are evaluating Remote AI, Local AI, or both

• Whether your Brains are cloud-synced or strictly local

• Whether you require a DPA or specific compliance documentation

We will then provide the appropriate materials.

Best regards,

John