Security and privacy

Your organization's data

Each organization's records are kept apart by rules in the database itself, not only in the application. Original documents are stored encrypted. Bomuno's own operators see account details, plans and usage, not your records.

Support access

To look at your records, Bomuno needs an owner to grant it. The access is read-only, limited to chosen locations, expires by itself within 72 hours, can be revoked at any time, and is logged.

AI

AI reads a real organization's data only after its owner turns it on. Every answer must carry the AI service's proof of zero data retention, or it is thrown away. When organizing an upload, AI sees column headings, counts and random stand-ins for values, not the values themselves. Requests ask that nothing is used for training.

Backups

The database is backed up daily and each backup is kept for 7 days. A closed organization's copies inside backups expire with those backups.

Hosting

Bomuno runs in Singapore. See the privacy policy for who processes data on our behalf.