generated: '2026-07-18'
method: searched
probe: true
source: https://trust.bretton.com/
url: https://trust.bretton.com/
certifications:
  - SOC 2 Type II
  - GDPR
frameworks:
  - NIST SP 800-57 (cryptography)
  - NIST incident response
security_contact: privacy@bretton.com
control_families:
  - Access control (role-based, MFA, quarterly reviews)
  - Data security (AES-256 at rest, TLS in transit)
  - Incident response (24x7 escalation, annual testing)
  - Application security (code review, dependency scanning, annual pen tests)
  - Infrastructure hardening and network segmentation
  - Vendor risk assessment (annual reviews)
  - Cryptography aligned to NIST
  - Centralized logging (30-day retention)
subprocessors: "None publicly listed at time of capture."
evidence:
  - source: https://trust.bretton.com/
    keywords:
      - soc 2 type ii
      - gdpr
      - trust center
      - nist
      - responsible disclosure