Trust center

Security and data facts for your review

BusinessProxy provides controlled access to internal web apps and work websites. Security and procurement reviewers can see the service boundary and request supporting evidence from one place.

Security review package

Evidence for procurement and security teams

The package is designed for practical review: what is implemented, what data is processed, which controls exist, and which certifications are not available today.

  • Architecture overview and data-flow summary
  • Browser-extension permissions and content-protection behavior
  • Logging, retention and deletion defaults
  • Incident notification process and vulnerability reporting route
  • Subprocessor list, DPA request path and compliance plan

Request review package

Request handling

Clear request owners without unsupported SLA promises

Procurement teams should not have to guess where DPA, subprocessor, status or incident questions go. We route each request to the right owner and keep public commitments limited to the artifacts that are approved today.

  • Security and subprocessor questions go through the vendor-review request flow and are routed to our security and product owners.
  • DPA, invoice and contracting requests go through the contracting request flow and require legal-team approval before execution.
  • Current status and incident questions are handled through monitored support; there is no public status page or public SLA today.

Security package for review

We maintain a current security review package for procurement and security teams. It is implementation evidence and operating-process documentation, not a certification bundle.

Request the security package

Data posture

BusinessProxy does not sell browsing data or use it for advertising. We process limited technical data to operate managed browser sessions and private app sessions, enforce limits and policy, prevent abuse, diagnose incidents and comply with valid legal obligations.

Service status

Current service status and availability questions are handled through monitored support. There is no public status page or public uptime SLA today. For confirmed incidents, affected customers are contacted through account or business contacts where legally and operationally appropriate.

Ask about current service status

Subprocessors

We maintain a current subprocessor register for vendor review. It lists enabled providers, processing roles, purposes and regions where applicable. We do not present disabled, legacy or optional integrations as current subprocessors.

Request the subprocessor list

DPA and data-subject requests

If your process requires a Data Processing Agreement, order form or contracting details, request them from a business email through the contracting flow. For access, correction or deletion of personal data, contact us from the email associated with your account. We verify the request and respond within the timeframe required by applicable law.

See the Privacy Policy →

Request DPA or contracting details

Incident notification

If we confirm a security incident that affects customer data, we will notify affected customers without undue delay, share the information reasonably available at the time, and provide updates as the investigation progresses.

Contact support about an incident

Report a vulnerability

Found a security issue? Please report it responsibly. Until a dedicated security mailbox is confirmed, vulnerability reports are accepted at support@business-proxy.com. Please include the affected URL or component, reproduction steps, observed impact, and a contact email for follow-up. Do not access, modify, delete or exfiltrate data that is not yours. We will acknowledge valid reports through the monitored contact channel and coordinate remediation based on severity.

View security.txt

Report a vulnerability

Contact and support

Use the sales and security review request flow for procurement, contracting, DPA, invoice and vendor assessment questions. Product and account support remains available by email.

Send a sales or review request

Company

BusinessProxy is operated by UPRAVTREB LLC. Contracting, invoice and legal-entity details are handled through the sales request flow before payment.

Request contracting details

Compliance posture

BusinessProxy does not hold SOC 2 or ISO certification today. We maintain implementation evidence, control notes and a compliance plan for procurement reviews. If your process requires certification status, data-residency information or control evidence, request the current package.

Request compliance evidence

See the full security model and data table → See retention defaults →

Need evidence for a security or procurement review? Request the current package