TRUST CENTERNon-custodial by design
Your business. Your Drive. Your asset. Your control.
Organize your files without holding them hostage. firmä is non-custodial: if you leave, your folders stay exactly as they are.
A map of the systems that touch your data. Choose a system to read how it handles your data in the panel that follows.
Trust, built into every engagement.
Five things you can count on, from the first folder you connect to the last deliverable you share.
- 01 · Non-custody
You own the asset
firmä takes a non-custodial role. Files stay in your Drive, and if you leave, you keep everything exactly as it is.
- 02 · Client experience
An enterprise-grade image
Look like a major firm with secure, managed data practices. Clients get a branded portal that shows only what you share: no more “oops, wrong file” moments.
- 03 · IP and confidentiality
NDA-ready security
Confidentiality is your currency. Tag internal docs and frameworks as Never Share, so they can never reach a client by accident. firmä keeps the structure (metadata) apart from your content, so file contents are never stored on our servers.
- 04 · Analytics
See what clients open
Track views and downloads across your portal. Every open and download is recorded in the audit log, deliverable by deliverable.
- 05 · Permissions
Ease of governance
Grant access per deliverable, keep reviewers view-only, and revoke external access in one step. When an engagement ends, everything you explicitly shared with that client is revoked. Fewer zombie links, clearer IP boundaries.
How firmä touches your data
Logic runs on our servers; files stay in your Drive. Here is how a request moves from your browser to your Drive, without firmä taking custody of your content.
- Browser ↔ firmä ↔ Drive
TLS 1.3
Encrypted in transit
Every request between your browser, firmä and your Drive travels over HTTPS.
- At sign-in
OIDC
Standard sign-in
Sign-in runs through a dedicated auth service on OpenID Connect, with a one-time email code or your Google account. No password to leak.
- In our metadata database
AES-256
Encrypted at rest
Sensitive metadata (client and engagement names, contact details, comments and storage tokens) is encrypted with AES-256-GCM before it’s stored.
- firmä ↔ your Drive
OAuth 2.0
Drive access you can revoke
firmä reaches your Drive through OAuth 2.0 and keeps no copy of your files. You can revoke that access from your Google or Microsoft account at any time.
Want the full security story? Talk to our team.
We can walk through architecture, compliance posture, and how metadata stays separate from your file bytes in Drive.
Ask BrioAI about a real engagement.
The tour opens a demo firm in the actual product, with BrioAI switched on. When you’re ready, your first client is free.