Your data is
protected by design.
Beaver finds and blocks the threats hidden in your browser extensions. Here is how we protect your organisation at every level.
Infrastructure & hosting
Beaver runs on first-tier cloud providers whose data centres meet the highest requirements for physical security and availability. Customer data is hosted in Europe.
Our cloud architecture enforces strict network segregation between the components of the service.
Data & encryption
You remain the owner of your data at all times.
All data is encrypted using AES-256 at rest and TLS 1.2+ in transit.
$encryption at rest: AES-256 $encryption in transit: TLS 1.2+ $access control: role-based ✓
Identity & access management
Multi-factor authentication (MFA) is mandatory for all internal access.
The platform supports Single Sign-On (SSO) and role-based access control (RBAC).
Offensive security
Penetration testing campaigns are run regularly by independent external providers.
Every deployment to production goes through a mandatory code review.
Compliance
Beaver is designed to comply with the General Data Protection Regulation (GDPR). The DPA is available on request.
The governing law is French law. Exclusive jurisdiction: the Paris Commercial Court.
Incident response
An incident response plan is in place and updated regularly.
Should an incident occur, Beaver undertakes to notify you as promptly as possible.
Availability & backups
Beaver works to provide 99% monthly availability, excluding planned maintenance.
Backups are taken daily and encrypted.
A security question?
Our team is available to answer your questions, provide our DPA or handle a vulnerability report.
security@beaverbrowser.comThis page was last updated on 23 March 2026.