We pledge to keep your data secure, follow security best practices, and never sell or share your data with any third party.
As of April 1, 2024, we are proud to announce our compliance with the AICPA SOC 2 Type 2 standards, ensuring that our systems and processes meet rigorous criteria for security.
Additionally, we adhere to the EU’s GDPR compliance checklist for US companies, affirming our commitment to data protection and privacy for our international users.
Furthermore, Bardeen meets the stringent requirements of Tier 2 and Tier 3 of the Cloud Application Security Assessment (CASA) as defined by the App Defense Alliance, built upon the industry-recognized OWASP Application Security Verification Standard (ASVS).
We’ve designed Bardeen so that your app data is only persisted in your local browser cache. The data exchange happens directly between your browser and the integrated third-party application.
This allows us to keep our cloud infrastructure minimal and scalable, and your data safe.Bardeen doesn’t store data from connected applications (such as your calendar, email or any other) in the cloud. The data is persisted in the local browser storage, and never on our cloud servers (for Enterprise users-only with “Workflow Intelligence Platform” see the corresponding section bellow for more details). No third-party or website can access information stored in your browser unless someone compromises your computer itself.
If you are using our paid services, and chosen to run your Automations or Autobooks even when your browser is closed, then part of your automations would be running on our server infrastructure. In this case, an instance of Bardeen would be created every time your automation condition is met (eg. when an e-mail arrives) in order to run your playbook (eg. send me a slack message). Contrast to your browser Bardeen instance, a cloud instance of Bardeen has no storage capabilities, meaning that once your playbook has finished running, all of your data are erased.
To allow you to access your automations and account settings from different browsers, we store the following data on our servers:
This information is securely exchanged between your client and our servers using industry-standard technologies and protocols.
We hate to see our users go. You can remove all your data from Bardeen with a few clicks from the settings page. Learn more here.
To build a product that people love, we need to understand how our users use it.We collect basic information such as how many active users we have, Playbooks people use, and the errors that happen to fix them.
The usage information we collect does not include any user data.
For example, we may store the fact that a user ran a Playbook that saves events from Google Calendar to Notion. But none of the information about the event itself (like subject, date, participants, etc) or data related to Notion (name of the database, column names in the database etc.) is ever collected.
We use Amplitude to store usage and telemetry information (number of Playbooks and Autobook executions, integration activation, etc).
We use Stasig for A/B testing and dynamic configuration.We use Sentry to store anonymized error and crash reports.
For more detailed information, please visit our Privacy Policy page or contact us.
Please note that the Workflow Intelligence Platform (Project Synthesis) is an enterprise-only feature available exclusively to customers within our highest subscription tier, ensuring dedicated security resources and enhanced protection for your mission-critical automation needs.
Bardeen's Workflow Intelligence Platform operates within our comprehensive security framework, ensuring your workflow data remains protected throughout the observation, understanding, and automation processes.
All workflow event streams captured during the observation phase are handled with the same SOC 2 Type 2 compliant infrastructure that powers our core platform.
Like all Bardeen services, Synthesis employs TLS 1.2 for in-transit data protection and 256-bit AES encryption for data at rest.
The data derived from observed browser interaction data is processed securely to create meaningful workflow patterns while maintaining strict privacy controls.
The custom-tailored AI agents created through Synthesis inherit the same stringent security controls that govern our automation platform, ensuring your automated workflows maintain confidentiality, integrity, and availability.
Workflow data collected by Synthesis is never sold or shared with any third party, aligning with our core security pledge and GDPR compliance standards.
Bardeen uses the following Chrome Extension Permissions only for the purposes described.
Please send any security related information or inquiries (including vulnerability disclosures) to security@getwiq.ai
