GDPR compliant
Buena maintains privacy practices designed to support GDPR-compliant processing.
Security & trust
Security evidence,
ready for review.
Understand how Buena protects your data, governs access, and keeps consequential actions under human review.
01 / Enterprise assurance
A clear view of
the fundamentals.
Privacy, identity, permissions, and support. Review the controls relevant to your team and its implementation.
SSO / SAML
Enterprise authentication is available through supported SSO and SAML configurations.
Role-based permissions
Workspace access can be scoped by role so people see and control the work appropriate to them.
Dedicated support
Enterprise customers receive dedicated support through evaluation, rollout, and operation.
Available configurations are confirmed for your workflow during evaluation.
02 / Product controls
AI does the work.
You set the boundaries.
Define what is eligible, what needs approval, and how the resulting activity stays visible to your team.
- 01 / Buena prepares
Work ready to review.
Research, context, and a proposed introduction.
- 02 / Your decision
Human review.
Inspect the recipient, message, and proposed action.
Approval before outreach - 03 / Buena acts
The approved step.
Supported execution through the connected account.
The review points and available actions are agreed for your workflow.
Human review gates
Require a person to review consequential work, including a first touch, before it moves into execution.
Account boundaries
Keep customers, partners, open opportunities, and other protected groups outside eligible workflows.
Execution guardrails
Define the channels, local operating hours, and account rules that a workflow must respect.
Traceable decisions
Keep the evidence, policy checks, review state, and resulting activity visible to the team.
03 / Data & privacy
Your data deserves
clear safeguards.
Technical and organizational safeguards, with the privacy policy and supporting materials close at hand.
01 / Protection
Encryption in transit and at rest
The privacy policy describes encryption in transit (TLS/SSL) and at rest, alongside access controls and authentication.
02 / Access
Restricted data access
Access controls and authentication are paired with need-to-know access for authorized personnel.
03 / Operations
Secure development and response
Security assessment, secure development practices, and incident-response procedures form part of the operating approach.
04 / Providers
Processor governance
Service providers processing data on Buena's behalf operate under data processing agreements and appropriate safeguards.
04 / Security review
Bring your requirements.
Let’s work through them.
Start with the assurance materials, then discuss the data, connections, and review points for your deployment.
Share your requirements
Bring the data, access, deployment, review, and procurement requirements that matter to your organization.
Review the workflow
Map where data enters, which decisions Buena supports, and which actions remain gated by your team.
Confirm the implementation
Agree the available controls and documentation for the specific product scope before deployment.
Review current compliance status, supporting documentation, and control details in the Buena Trust Center. Product configuration is confirmed against your intended workflow during evaluation.