Protecting Data-in-Use is the Next Frontier in Cloud Security

Mimir pioneered the first data-in-use security solution for SaaS platforms - ensuring that data is protected, even when accessed.

Brunner DB

How BrunnerDB Works

Even with Zero Trust, data must be decrypted to process – creating an unpatchable attack surface. Monitoring tools detect threats but don’t eliminate threat exposure.

Data Chunking & Local Encryption

BrunnerDB encrypts data at the user’s device before upload. This eliminates the needfor server-side key management and reduces backend CPU overhead.

Embedded Security Layer

BrunnrDB integrates directly into your application stack as a transparent SDK or drop-in service — no disruption to your existing user experience.

Distributed Processing at the Edge

Instead of central compute loads, BrunnrDB shifts processing to secure browser-based sandboxes. This significantly reduces cloud compute costs while preserving performance.

Zero-Exposure Architecture by Design

BrunnerDB eliminates the traditional attack surface by ensuring data remains encrypted across all states and throughout the entire stack:

At Rest

Encrypted blobs stored on the server – server holds no keys

In Transit

Encrypted packages transmitted over TLS and internal protocols

In Use

All decryption and processing occurs locally within ephemeral WebAssembly-based sandboxes.

No Root Access

Even system-level compromised cannot expose user data.

End User Device (Browser WASM Sandbox)
Encrypted Transport Channel
BrunnerDb Server (Storage Only)

Built By Developers, For Developers

BrunnerDB was designed from the ground up with engineering teams in mind.

API-First SDK

TypeScript and Rust wrappers make it easy to embed BrunnrDB into modern SaaS stacks.

Zero PlugIn Overhead

Works in any modern browser – no extensions, agents, or install friction.

Stateless by Design

Fully supports disconnected mode with audit-ready state management.

Fast Integration

Deploy in hours, not weeks – no backend re-architecture required.

Security should be native, not bolted on.