How Pebrik looks after your company's data.
What we keep, where it's kept, who else handles it and what your admins control.
Where your data lives
Pebrik runs on Amazon Web Services in London. The servers, the database, your files, the backups, the emails Pebrik sends and the sandbox that runs code are all there. Traffic reaches Pebrik through Cloudflare.
Disks and backups are encrypted, every connection uses HTTPS, and the keys Pebrik holds for connected services, such as Google Drive, are kept encrypted too.
AI model and search providers receive only what a reply needs, and may handle it in the United States or elsewhere, with the safeguards UK law requires.
Never used for training
Pebrik doesn't use your chats and files to train AI models. The model providers work under their terms for business customers, which don't let them train on it either. We don't sell personal data or show adverts.
Who can get in
- Only people an admin has added can sign in.
- People sign in with Google, Microsoft, a passkey, or a six-digit code by email. There are no passwords to leak.
- A signed-in browser lasts 30 days from its last use, and people can sign out of their other devices.
- Removing someone signs them out everywhere at once.
- Repeated sign-in attempts are limited.
- Single sign-on through your identity provider (SAML or OIDC), and SCIM to add and remove people.
What admins control
- Groups decide who can use which models, features and connectors.
- Spending limits by group and by person, with usage by person, model and connector.
- Which kinds of files can be uploaded, and how long files and chats are kept.
- Connectors are added and reviewed by admins, and each person signs in to their own account.
- Agents, skills and flows are shared only with the people and groups their owner chooses.
A person approves the big moves
- Tools that send or change things, such as sending an email or changing a file, ask before they act.
- In a flow, an agent can't change anything unless that step allows it.
- Flows can stop for a person's approval, and the approver can change what they approve.
- Pebrik checks connected services every day for tools that have changed.
Running code safely
When Pebrik runs code to analyse data or make a file, it does so in an isolated sandbox on Amazon Web Services in London, with no internet access. Admins decide which groups can run code.
A record of what happened
Activity records changes to settings, sign-ins and sign-outs, and actions such as deleting a chat, for your admins to review. Usage records which models and tools were used and what they cost.
Keeping and deleting
- Chats and files are kept until people delete them, or for as long as your company's retention settings say.
- Backups are kept for 30 days.
- When your company leaves, we delete its data when it asks.
Who else handles data
Pebrik relies on these companies, each handling data only to provide its service.
| Company | What for | When |
|---|---|---|
| Amazon Web Services | Servers, database, files, backups, sending email and running code, in London | Always |
| Cloudflare | Carries and protects all traffic to Pebrik | Always |
| OpenAI, Anthropic and Google | AI models; OpenAI also makes files searchable and handles speech | For each reply, with what it needs |
| Brave and Tavily | Web search | When Pebrik searches the web |
| Google and Microsoft | Sign-in, and Google Drive or Microsoft 365 | When people use them |
| Meta (WhatsApp) | Agents on WhatsApp | When your company uses them |
Your rights
Under UK data protection law you can ask to see, correct, delete or take a copy of your personal data, and to limit or object to how it's used. Write to privacy@pebrik.com and we'll answer within a month. You can also complain to the Information Commissioner's Office. The privacy policy has the details.
Your own server, on request
For companies that need it, we can run Pebrik on a separate server just for you. Ask about a dedicated setup.
Report a security problem
If you find a problem with Pebrik's security, write to hello@pebrik.com with "Security" in the subject. We read every report and reply.
The company
Pebrik is made by PEBRIK LTD, registered in England and Wales, company number 17529361. Registered office: Suite RA01, 195-197 Wood Street, London E17 3NU.