Security and trust
How we protect your data
The page a security reviewer reads before approving the subscription. Every claim here is verified against the platform before it is published.
Hosted on AWS in the United States. Encrypted in transit and at rest. Each organization’s data kept separate. No customer data used to train AI models. Export or delete on request.
Access and identity
- Sign in with email and password, Google, or Microsoft
- Two-step verification with authenticator apps and passkeys
- Roles for managers and members; an activity trail of changes
Platform
- AWS, United States; encrypted in transit and at rest
- Web application firewall, security headers, rate limits
- Daily snapshots
Your data
- Export everything at any time
- Delete the organization and its data on request
- Data processing agreement and privacy policy published
Billing
- Payments by Stripe; monthly or annual; cancel any time
- Read-only access to your data after a subscription ends
AI processing
ResiliencyPulse sends assessment scores and rationale text to Anthropic’s Claude through Amazon Bedrock in the United States to produce summaries, an executive email, and strengths and gaps. Customer data is not used to train models. Usage is logged. The data processing agreement describes this in full.
Benchmarking and anonymization
Benchmarks are rebuilt nightly from finalized assessments. A cohort is published only when it contains at least five organizations, and benchmark output never identifies one. Organizations can opt out of contributing at any time in settings, and opting out does not affect access to published benchmarks.
Compliance posture, stated plainly
- No SOC 2 or ISO 27001 certification today. We will say so until that changes.
- Terms of Service, Privacy Policy, and Data Processing Agreement published in the application (2026-10-11) and accepted at sign-up; an AI data amendment takes effect 2026-11-10. See app.resiliencypulse.com/dpa.
- GDPR and CCPA requests handled through the contact on the privacy policy.
Product changes and incidents
What changed in the application, month by month: What’s new. Customers are notified by email of any incident affecting their data.
Documents
Questionnaires
Procurement questions?
Talk to Bryghtpath and we will answer your vendor questionnaire from this page.