Verified Entity

Trust Center

Complete transparency about who we are, how we operate, and how we protect your data. This page is designed for enterprise procurement, KYC, and compliance review teams.

Legal Information Compliance Security Contact Compliance Team
01

Company Legal Identity

Full legal and commercial identity information for KYC and procurement verification.

Commercial Brand
Blue Bridge Global Connection
Legal Entity Name
THE BLUE BRIDGE CONNECTION CO SOCIEDAD DE RESPONSABILIDAD LIMITADA
Entity Type
Sociedad de Responsabilidad Limitada (S.R.L.) — Limited Liability Company
Business Reg. No.
3-102-880-591
Country of Incorporation
Costa Rica
Registered Office
Alpha Legal
Boulevard Dent, Barrio Dent
San Pedro, Montes de Oca
San José 11501
Costa Rica
LATAM Operations
Costa Rica & Colombia
EMEA Operations
Belgium
Website
www.bluebridge.es
02

Contact for Compliance

Direct contact channels for enterprise procurement, legal, and compliance inquiries.

Compliance & Legal

For KYC verification, vendor questionnaires, DPA requests, and legal inquiries.

compliance@bluebridge.es →
Security & Privacy

For data protection, GDPR requests, security assessments, and vulnerability reports.

security@bluebridge.es →
Enterprise Sales

For enterprise partnerships, procurement conversations, and contract discussions.

sales@bluebridge.es →
03

Corporate Structure

✓
Single legal entity incorporated in Costa Rica
✓
Commercial brand: Blue Bridge Global Connection
✓
All operations conducted under the same legal entity
✓
Belgium operations conducted as a branch/representative office
✓
No shell companies, complex holding structures, or offshore arrangements
✓
Technology company focused on AI, software, and cloud services
Business Activities
Artificial Intelligence Software Development
Enterprise AI Agent Deployment
Cloud Infrastructure Services (AWS)
Business Process Automation
Custom CRM and ERP Development
Healthcare Technology Solutions
Voice AI and Telephony Systems
04

Data Processing & GDPR Compliance

How we handle personal and business data in accordance with GDPR and international privacy standards.

Data Controller

✓
THE BLUE BRIDGE CONNECTION CO SRL acts as Data Controller for client data
✓
Data Processing Agreements (DPA) available upon request for enterprise clients
✓
We process only data necessary for service delivery (data minimization)
✓
Data subjects may exercise rights: access, rectification, erasure, portability
✓
72-hour breach notification protocol in place

Sub-Processors

Amazon Web Services
Cloud Infrastructure
Anthropic
AI Model API
Twilio
Voice & SMS
Cloudflare
CDN & Security
05

Security Standards

Encryption

AES-256 encryption at rest. TLS 1.3 for all data in transit. Zero-trust network architecture.

👤
Access Control

Role-Based Access Control (RBAC). Multi-factor authentication. Principle of least privilege enforced throughout.

Monitoring

24/7 system monitoring. Automated anomaly detection. Full audit logging of all access and changes.

💾
Backups

Automated daily backups. Cross-region replication on AWS. Recovery Time Objective (RTO): 4 hours.

Vulnerability Management

Regular security assessments. Dependency scanning in CI/CD. Responsible disclosure program available.

🚨
Incident Response

Documented incident response plan. 24-hour initial response SLA. Post-incident reports for enterprise clients.

06

Cloud Infrastructure

✓
Primary infrastructure on Amazon Web Services (AWS)
✓
AWS regions: us-east-1 (primary), eu-west-1 (EMEA)
✓
CloudFront CDN for global content delivery
✓
S3 static assets with versioning and lifecycle policies
✓
RDS PostgreSQL with Multi-AZ deployment
✓
All compute in private VPC with WAF protection
✓
AWS Shield Standard for DDoS protection
Uptime & SLA
Platform Uptime Target 99.9%
Incident Response (P1) < 1 hour
Recovery Time Objective 4 hours
Recovery Point Objective 1 hour
07

Responsible AI Statement

Blue Bridge Global Connection is committed to developing and deploying AI systems that are safe, transparent, fair, and beneficial to society. Our AI practices are guided by the following principles:

✓
Human oversight: All AI systems operate under human supervision with clear escalation paths
✓
Transparency: We disclose to end-users when they are interacting with AI systems
✓
Fairness: We audit AI outputs for bias and implement corrective measures
✓
Privacy by design: Data minimization and purpose limitation in all AI systems
✓
EU AI Act readiness: Preparing for compliance with EU AI Act provisions
✓
No prohibited uses: We do not build AI for mass surveillance, social scoring, or manipulation
AI Technology Partners

Our AI systems are powered by industry-leading foundation models from providers with strong safety commitments:

Anthropic Claude
Primary AI backbone — Constitutional AI, safety-first design
OpenAI
Secondary model — specific use cases and embeddings
Google Gemini
Multimodal processing and document AI
08

Vendor Security Questionnaire

For enterprise procurement teams requiring formal security assessments.

We welcome and respond promptly to vendor security questionnaires from enterprise procurement teams. Our compliance team is experienced with standard questionnaires including SIG Lite, VSQ, CAIQ, and custom enterprise formats.

✓
Response time: 5 business days for standard questionnaires
✓
We provide supporting documentation upon request
✓
NDA available before sharing confidential technical details
✓
Supported formats: SIG Lite, CAIQ, VSQ, custom enterprise formats
✓
DPA (Data Processing Agreement) provided for EU/GDPR requirements

Submit a Questionnaire

Send your vendor security questionnaire or procurement form to our compliance team. We will respond within 5 business days.

compliance@bluebridge.es
Response time: 5 business days
09

Business Continuity

BCP Documentation

Documented Business Continuity Plan covering all critical systems, personnel, and recovery procedures.

🔄
Disaster Recovery

Multi-region AWS architecture ensures service continuity even in the event of regional infrastructure failures.

🧪
Regular Testing

Business continuity and disaster recovery procedures are tested quarterly to ensure effectiveness.

Documentation

Related Legal Documents