Security at Brea
Brea works in your email, calendar and other apps for you. Here is how it protects that access and your data. Our Trust Center has the full detail.
Updated October 2026
Trust Center
Our security controls, policies and compliance status, kept current. Security documents are available on request.
CASA Tier 2
VerifiedCloud Application Security Assessment by the App Defense Alliance. Google requires it before an app can work with restricted data like Gmail.
SOC 2 Type 2
In progressAudit underway with Vanta. Brea does not have a SOC 2 report yet. Check status
Microsoft Verified Partner
VerifiedBrea is a verified partner in Microsoft's partner network.
How Brea handles your data
Brea always
Encrypts everything. TLS on every connection and encryption at rest. Saved logins are sealed with AES-256-GCM and bound to your account.
Asks before it matters. Sending, deleting, sharing and other risky actions wait for your OK, unless you chose Always for that action. You see an email before it's sent.
Keeps you in the loop. Brea tells you in chat what it did. You can read what it remembers and stop any goal it runs.
Gives you a private agent. Your own isolated agent and sandbox, with storage only your agent can use.
Deletes when you say so. Disconnect an app and your agent loses access right away. Clear its memory and it forgets everything it saved.
Brea never
Trains on your data. Your conversations, files and connected-app data never train an AI model.
Shows the model your keys. Passwords and tokens are attached server-side when a tool runs. The model only holds a reference.
Shares your agent. No other customer can reach your agent, its sandbox or your data.
Sells your data. Your email, files, calendars and messages are never sold, and never shared with advertisers.
Keeps your agent after you leave. Deleting your account deletes your agent with its memory, files and chat history, and disconnects your apps.
Questions
More questions? Email [email protected]