Basewell Security Overview

Customer data is backed up daily and secured in transit, storage, processing, and at rest with strictly enforced access controls. Admins can add granular user permissions to segment content visibility and access when using Basewell.

Basewell is wrapped in an authentication layer, with logging enabled on all critical systems. We routinely scan for vulnerabilities, monitor packages, and conduct security reviews of the codebase. All features must pass rigorous quality and security controls before entering production. Amazon Web Services (AWS) is used to host our application. All data center physical security controls are deferred to them.

Basewell is hosted on Amazon Web Services (AWS), one of the major cloud service providers, in the East US region. Customer data is not stored outside of production environments, and customer accounts are logically separated from development instances with unique development, testing, and production environments. Basewell employees are only allowed to access customer data—with permission—during troubleshooting sessions.

AI subprocessors are forbidden from using Basewell customer data to train models. In addition, Basewell utilizes zero-retention policies when possible, with minimum-retention policies as the standard. For more information on AI subprocessor information, visit OpenAI's security portal.

Workspace data powering Basewell AI is logically separated. Basewell AI operates autonomously within each workspace instance, minimizing errors, and eliminating cross-pollination between similar concepts across different organizations. All Basewell AI responses include links to source material for transparency on how responses were informed, and we follow AI subprocessor best practices to ensure accurate, consistent, and safe results.

Basewell utilizes a global server network to deploy reliable, stable, and fast user experiences, anywhere. Additionally, region redundancy and backup deployment protections are in place should a region fail or go offline. Basewell's global uptime is 99.99%.

Basewell's development best practices are built to follow international guidelines and regulatory standards. Our data and privacy programs comply with General Data Protection Regulation (GDPR). Our SOC 2 Type 2 certification is in process.