How does Beam handle GDPR?

Beam is built to support your GDPR obligations: you control your data, can export or delete it at any time, and we sign a data processing addendum on request. Every sub-processor, what it does with your data and where it is established, is published on our sub-processors page.

Where is Beam hosted?

The managed cloud runs on Amazon Web Services in France, inside the EU. If your data needs to stay on your own servers or in your own datacenter, the same full stack runs there with Docker Compose.

Does Beam use our data to train AI models?

Beam never trains or fine-tunes models on your data. Requests go to the model provider you choose, under API terms that, for the major providers, exclude training on API traffic.

Does Beam support bring-your-own keys?

Yes. Bring your own model-provider API keys; every supported LLM runs through the same interface.

How is access controlled inside a workspace?

Role-based access control with owner, admin, member, and viewer roles, per-resource sharing, and per-workspace data isolation. Every admin action lands in the audit log.

What happens to our data when we stop using Beam?

Delete chats, files, agents, and workflows yourself at any time. For full workspace deletion, contact us and we remove stored data and search indexes.

Security

Built for the security review.

Encryption in transit and at rest, per-workspace isolation, role-based access, and a full audit trail. Beam never trains models on your data.

Get started Talk to sales

Maria Chen · AdminInvites priya@acme.com

In transitEncrypted with TLS

IdentitySigned in with Google

RoleAdmin · Manage members

WorkspaceScoped to Acme Corp's workspace

Audit logRecorded · invitation.create

Security engineering, in the open.

Controls you can verify in the product, not badges.

Encryption

TLS in transit; at rest by our cloud providers, with app-level encryption on stored credentials.

Board update.docxOpened by you

Q3 revenue: 4.2M, up 18%

Two hires approved in sales

In transitTLS

At restEncrypted by the host

Stored credentialsEncrypted again by Beam

Access control

Owner, admin, member, and viewer roles, per-resource sharing, and a full audit log.

Audit logEvery admin action

CCamille R. changed Sam's role to Adminjust now

LLéa M. published the agent HR Assistant2 min

NNoah K. invited 4 members9 min

CCamille R. set chat retention to 90 days14 min

LLéa M. shared the folder Payroll with HR only21 min

Workspace isolation

Every query is scoped to your workspace. Retrieval never crosses organization boundaries.

Search your knowledge

Your workspace

HR handbook 2026.pdf

Leave & absence policy.docx

Benefits FAQ

Other workspaces

Out of reach

No model training

Beam never trains models on your data; providers you choose serve requests under their API terms.

YouClaude

Summarise the Q3 board deck in five bullets

Used to train modelsClaude serves the request under its API termsNever

Two ways to run Beam.

Our managed cloud, or entirely on your own hardware.

Beam Cloud

Standard

The managed service, run by us on Amazon Web Services in France.

Self-hosted

Your hardware

The same full stack (app, API, Postgres, worker, object store) on your own servers or in your own datacenter, with Docker Compose.

Beam CloudSelf-hosted

FranceManaged by Beam

Your infrastructureThe same stack, on your own servers

Docker Compose

Nothing to install: sign in and start

Services

caddywebapiworkersandboxrendererpostgresredisminio

Database, files and queues stay in France

The controls, in plain terms.

From encryption to admin permissions.

Where your data lives

Managed cloud on Amazon Web Services in France
Self-hosted option keeps everything on your own servers
Encrypted in transit; encrypted at rest by our cloud providers

Security architecture

Per-workspace data isolation
Role-based access control
Integration credentials encrypted at the application layer
Rate limiting on by default

Accountability

Every admin action lands in the audit log
Per-workspace usage analytics
Sub-processors listed in the DPA
Delete chats, files, and agents at any time

Model usage & BYOK

Bring your own model-provider keys
One interface across all providers
Beam never trains models on your data

Legal & data-processing documents.

Public, current, and written to be read.

Data processing addendum (DPA)

Terms & conditions

Secure by design

Your data stays yours.

RolesCustomize the specific permissions for each role

Save changes

MemberEditorAdmin

Create agents

Share agents with the workspace

Share skills with the workspace

Share agents with any group

Manage integrations

Read the audit log

Questions & answers.

In transit with TLS. At rest, data is encrypted by our cloud providers, and stored integration credentials get an extra layer of application-level encryption on top.

The essential AI‑stack for your company.

Simple for business users. Ready for advanced use-cases.

Chat

Model agnostic, for everyone.

@IT Help Desk

Agents

Custom AI for recurring tasks.

Workflows

Build powerful AI automations.

Knowledge

Cited answers from your own documents.

Integrations

Integrates with the tools you use.

POST /v1/chat

API

Connect to your own applications.