Your contacts, deals, documents, conversations, and client details are some of the most important information in your business. Workspace is built to keep access limited to the right people, keep customer data separated, and give you control over who can see
Every workspace is sealed off from every other one, by two separate locks. The app limits every request to your workspace, and the database itself refuses to hand over
You decide who sees what with roles and team sharing, and it holds everywhere: in the app, the API, webhooks and
Nobody at Broker & Agent can open your workspace unless an owner grants access for support. That access has an end date, 30 days at most, and stops
You own your contacts and your leads. Export your contacts to a spreadsheet any time, and if you ever leave, you take them with you. We never sell your data or
Sign in with Google, Microsoft or your email address. Every email address is verified before anyone gets in, and access is re-checked every minute, so removing someone from your team takes effect
Apps connect with OAuth: you sign in, see exactly what they’re asking for, and approve. Every connected app is listed in Settings, and you can disconnect any of them
Workspace’s AI runs on OpenAI’s API. We send requests with storage turned off, and OpenAI doesn’t train its models on API data. The assistant only uses what the task in front
Every signed document comes with a certificate of completion: each signer’s IP address and browser, the full history of the envelope, and a fingerprint of the document before
Card details go straight to Stripe, a PCI Level 1 certified payment provider. They never
Every connection uses HTTPS, enforced with HSTS. Your data is stored with providers that encrypt it at rest, and the most sensitive pieces get their own
Workspace runs on Cloudflare’s global network, with the database hosted on Amazon Web Services and files stored with Cloudflare. Your data is stored in
The database can be restored to any point in the last seven days, with daily and weekly snapshots on top. We test restoring, so we know it works
Automated monitoring checks every service every few minutes and watches for errors, unusual traffic and failed jobs, and alerts our team. Any feature can be switched off in seconds if
Email security@brokerandagent.com with the details and the steps to reproduce it. We’ll confirm we have it, keep you updated while we fix it, and credit you
Please give us a fair chance to fix it before telling anyone else, and don’t access other people’s data or disrupt the service
Yes. Each company’s data is kept apart by two separate locks, in the app and in the database. Everything is encrypted in transit and at rest, data is stored in the United States, the database can be restored to any point in the last seven days, and our systems are monitored
In the United States. The database is hosted on Amazon Web Services, files are stored with Cloudflare, and the app runs on
No. Every workspace is sealed off from every other one. The app limits every request to your workspace, and the database adds row-level security on every table as a second
Our team can’t open your workspace unless an owner grants support access. That access lasts 30 days at most, ends on its own, and every visit is recorded in
That depends on your team’s sharing setting. With an open book, the team sees shared contacts. With private desks, each agent’s clients stay private between agents. Owners and admins
No. Workspace’s AI runs on OpenAI’s API, and OpenAI doesn’t train its models on API data. We send requests with
No. We never sell your data or
Yes. Email hello@brokerandagent.com with your questionnaire or review, and our team will complete it. A data processing addendum is available on
Email security@brokerandagent.com with the details and the steps to reproduce it. We’ll confirm we have it and keep you updated while
Have a question about how we protect your data, or a security review to fill in? Write to us and our
