Trust
Security & data protection.
Last updated October 10, 2026. Your business context deserves clear boundaries. Here is how Bussco protects access, preserves decision history and handles payments, along with the limits of those safeguards.
Your business has its own boundaries
Workspace records are scoped to an organization. Membership and permission checks govern what a signed-in person can read or change, both in the application and through database access rules. Belonging to one business does not grant access to another.
Defined team roles
Owners and Strategic/Admins manage the business. Contributors can contribute within their permitted scope. Viewers are read-only except for assigned questions, assigned client actions, help requests and explicitly designated deliverable approvals.
Support and consulting are distinct
Authorized Bussco administrators can access information for platform support. Consulting delivery authority requires an engagement assignment; platform administration alone does not authorize delivery or changes to accepted business knowledge.
ALEX assists. People decide.
ALEX and the strategic tools use large language models on relevant Workspace context to analyze your data at scale and produce proposals and synthesis. A generated proposal does not automatically become accepted Business Brain knowledge. People review, edit and explicitly accept what belongs in their business.
Traceable work
Saved work includes source and attribution records. Edited tool results retain their generated original, while accepted active versions can inform subsequent work. Delivered assets are content-locked rather than silently rewritten.
External processing
Requests pass through our secure cloud gateway to large language model providers whose infrastructure complies with SOC 2 Type II, ISO 27001 and GDPR standards. Do not enter passwords, payment credentials or unnecessary sensitive personal information. Our privacy policy explains this processing; we do not make a blanket zero-retention or no-training promise.
Payments stay with Paddle
Paddle.com acts as Merchant of Record for subscriptions and handles payment details directly. Bussco does not store your full card number. Billing management requires an authenticated Workspace Owner. Payment notifications are checked against their signing secret before updating subscription records and access; repeated notifications are handled without duplicate fulfillment.
Data controls, with clear limits
Data & trash supports deleting and restoring eligible items, with a 30-day restoration window for soft-deleted records. Resetting data is permission-controlled and is not an erasure of protected delivered originals or legally required billing records. Business deletion is blocked while subscribed. Contact hello@bussco.com for account deletion or a broader data request.
Public demo
Demo drafts and illustrative results stay in browser storage and are not live Workspace records. Reset clears the demo draft; it does not delete your account. Public-page analytics may still measure demo interactions.
Public-site measurement
Microsoft Clarity provides public-site interaction analytics, heatmaps and session replay. Workspace and onboarding paths are excluded from directly loading its script. This is not a guarantee that every signed-in interaction is untracked. See our privacy policy for details.
Report a security concern
Email hello@bussco.com with the affected page, a description and safe reproduction steps. Do not include passwords, access tokens, card details or another customer's information. Do not access other businesses, disrupt the service or conduct destructive testing. We will review your report and coordinate appropriate next steps; this is not a paid bug-bounty program.
Have a security or privacy question?
Tell us what your business needs to understand before using the Workspace.