Built so your company's work stays your company's.
What IT and security teams usually ask, answered plainly. If something here isn't enough, email privacy@brinkboard.com and a person answers.
TLS for everything in transit. Data encrypted at rest. Stored in the United States (Virginia).
The database itself checks every read and write. A task is visible only to the people on it.
AI runs only when you use it, through Anthropic's commercial API. Your tasks don't train anyone's models.
No ad networks, no analytics SDKs, no data sales. Ever.
Who can see what
- A task is visible only to the person doing it, the person who gave it, and the person who asked for it. Nobody else, including other people at the same company.
- Row-level security is turned on for every table, so these rules are enforced by the database, not just by the app.
- Your contact list and groups are private to you.
- Access to the production systems is limited to Brink's founder, and is used only to run and support the service.
Sign-in and accounts
- Passwords are hashed by the sign-in system. Nobody at Brink can read them.
- Sign-in codes are short-lived and single-use. Brink's emails don't carry sign-in links, so link scanners in company mail can't use them up.
- Join links sent by a coworker work once, expire in 14 days, only work for an address with no account, and are stored only as a one-way hash.
- The Claude connector uses OAuth 2.1. You sign in and approve it yourself, and it can't delete tasks.
- Microsoft work accounts: Brink can sign people in with their company Microsoft (Entra ID) account, so your IT team controls who gets in and access ends when someone leaves. Your IT admin approves Brink once in Microsoft Entra; until then people use email or password sign-in.
Task links for people without an account
- Each task in a group gets its own private link, keyed by a 192-bit random code. It can't be guessed, and it never appears in server logs (it sits after the
#in the address). - A personal link opens only that person's task and a view-only copy of the group's board. It can mark that one task Done, Working or On hold, add a note, or ask a teammate for help. Nothing else.
- Opening a link changes nothing. Only a tap does, so mail link scanners can't mark work done.
- A group can also have one shared link that the organiser sends from their own email. Teammates tap their own name to update their tasks. That link goes only to the group, and the organiser can reset it at any time; the old link stops working at once.
- Every link stops working the moment the group is closed with All clear.
Activity history
For group work, Brink records every status change, update and hand-off: who did it, when, and whether it came from the app or a link. Group members can open the History on the group page. The record is written by the database itself, so the app can't skip or edit it. After All clear, anyone in the group can have Brink write an after action review from this record. It uses shared updates and any chat or email thread the group pasted in, never private notes. Pasted conversations are visible to the group and deleted with it.
How long data is kept
- A group and its tasks, notes and history are deleted automatically 30 days after the group is closed with All clear.
- Everything else stays until you delete it or delete your account.
Email replies
Each task email carries a private reply address. A reply is accepted only when the sender is on the task and the message passes their domain's DMARC check, so a forged From line is ignored. Instructions written inside an email are never followed: a reply can only add a note or mark that one task done.
Companies that handle Brink data
Only these, and only to run the service. Each publishes its own security reports (such as SOC 2 Type II) on its trust page.
| Company | What for | Data |
|---|---|---|
| Supabase | Database, sign-in, server functions | All account and task data. AWS us-east-1 (Virginia). |
| Netlify | Serves the website and app | Standard web request logs |
| Resend | Sends Brink's email and receives task replies (on Amazon Web Services) | Recipient address and message content |
| Anthropic | AI features, only when you use them | The text you send it (listed in the privacy policy). Not used for training. |
| Apple | iPhone app: payments, notifications, Siri and speech | Subscription status, device token, spoken words |
| ImprovMX and Google | Deliver email you send to support@ and privacy@ | Only the messages you send us |
Your data, your call
- Export: Menu, then Download my data, gives you a file of your tasks, people, groups and settings.
- Delete: Menu, then Delete account, removes the account right away. Open tasks someone gave you go back to them.
- No lock-in: we don't delete or hold data hostage if you stop paying.
For IT: what to allow
If your mail filter or network blocks Brink, these are the addresses it uses:
- Website and app:
brinkboard.com - Data and sign-in:
xdiiugelihicrzwdlhor.supabase.co - Email from
noreply@brinkboard.com, signed with SPF, DKIM and DMARC - Task replies go to
*@reply.brinkboard.com
If Brink's email can't get through, nothing stops. Text it, WhatsApp it, or email it once: if company mail blocks us, it goes out from you, like any message from a colleague. People can also sign in with a password, or with a Microsoft work account once your IT approves Brink.
Links: each person's link opens only their own job and is the only way to change it. Opening a link changes nothing, so mail scanners can't mark anything done. The group board link is view only. When a job is handed on (once), the new owner gets a new link and the old one can only watch. All clear closes every link for that group.
What we don't claim
Brink is a small company. It doesn't hold its own SOC 2 or ISO certificate yet; it is built on providers that do. Brink is not covered by HIPAA and is not for patient health information: please keep patient names and medical details out of tasks, notes and messages. If your company needs a security questionnaire or a data processing agreement, ask. We'll tell you straight what we can do today.
Email privacy@brinkboard.com with “Security report” in the subject. We'll reply within two business days and won't take action against good-faith research.