Security at RevYou

Account access

Sign-in to the management interface uses a one-time link sent to the authorized email address. We do not store a user password.

Each user can access only the information they were set up for.

Permissions

The system has roles: owner, administrator, manager and staff. Each role's permissions are enforced on the server side and in the database itself (Row-Level Security).

Separation between different businesses is complete: a user of one business cannot access another business's information.

Encryption

Traffic between the browser and the service is encrypted with HTTPS/TLS.

Encryption of stored data is provided by the infrastructure provider.

Infrastructure

The service runs on managed cloud services: site hosting and the database are with established cloud providers. The database is configured in the Frankfurt region, as described in the privacy policy.

Action logging

Important administrative actions in the system - team and permission management, feedback handling and settings changes - are recorded in an activity log.

Public forms

Input submitted through the public forms is validated on the server side.

The data requests form is rate-limited, to reduce abuse.

What else

We use security measures designed to protect information and restrict access to it.

Found a security vulnerability? We would appreciate a responsible report through the vulnerability disclosure page.

More documents on privacy and security are gathered in the Trust Center.

For questions about security: info@revyou.site