Security companies handle sensitive information – drawings, alarm layouts and tenders. That is why Bidantra is built with security as its foundation, not as an add-on. Here is how we protect your data.
Built on a certified database platform
Bidantra runs on Supabase, one of the world's most widely used database platforms for business-critical systems. Supabase is independently audited and certified to SOC 2 Type 2 – an annual examination by an external auditor confirming that security, availability and confidentiality work in practice over time – and ISO 27001, the international standard for information security. The audit reports and certificate can be shared, under confidentiality, with customers on the security add-on as input to your own vendor assessment.
Encrypted end to end
All data is encrypted in transit (TLS) and at rest (AES-256), covering both the database and uploaded files. Links to files expire after a limited time.
Your data is yours alone
Every company has its own fully separate space. Your projects, drawings, prices and rules can never be seen by any other company on the platform. The separation is enforced in the database itself, not just in the interface.
You control access
Your company's administrator invites colleagues and decides what they are allowed to do. Access can be revoked immediately.
Two-factor authentication for everyone
Every user signs in with a password and a one-time code from an authenticator app on their phone. Even if a password were leaked, no one gets in without the phone.
AI within the EU that never learns from your data
The AI that reads documents and drawings runs on Google's AI service in the EU. Your data is never used to train AI models and is not shared with anyone else.
Backups and traceability
The database is backed up automatically every day. Sign-ins and important changes are logged.
GDPR and agreements
We comply with the GDPR. Every customer receives a data processing agreement (DPA) that lists all sub-processors. We only store the personal data we need – name, email and role. Alarm codes, keys and similar information must never be entered into the system.
You own your data
You can export your projects at any time. If the agreement ends, your data is deleted in accordance with the agreement.
