Protected sign-in
Brivaro uses Auth0 for identity and sign-in. Passwords are handled by Auth0 and are never stored in the Brivaro application.
Access built around trust
Every API request requires authentication. Workspace permissions determine which businesses, folders, requests, and files each user can access.
Private file access
Files are private by default. Uploads and downloads use short-lived, file-specific links created only after access has been checked.
Secure cloud infrastructure
Business information is kept with established cloud infrastructure providers, with separate controls around application data and file storage.
Deliberate security checks
Requests are validated on the server, browser access is restricted to approved origins, and permissions are checked before sensitive actions.
Your files do not pass through our application servers.
After Brivaro confirms your identity and permission, your browser transfers the file directly to or from private cloud storage using a link that expires after a short time. The storage object remains private, and the link is limited to that specific file.
See something we should know about?
We welcome responsible reports about potential security issues. Please include enough detail for us to understand and reproduce the issue, and do not access or change another user’s information.