Security
Your data. Protected.
Your drawings, pricing and estimates are your competitive advantage. Ryvet is built to keep them isolated, encrypted and under your control. Here's exactly how we do it, and what's still on our roadmap.
Infrastructure
Security built into every layer
Encryption at rest and in transit
All data is encrypted in transit over TLS, and HTTPS is enforced on every connection. Stored data, including your estimates, cost libraries and uploads, is encrypted at rest with AES-256.
ActiveUS-based data storage
Your data is stored in US data centers (Amazon Web Services, Oregon), on infrastructure providers that hold SOC 2 Type II attestations. AI analysis of your drawings is performed by Google and OpenAI through their business APIs, which do not use your data to train their models. Those providers may process requests outside the US.
ActiveRole-based access controls
Owners, admins and members each get the right level of access. Only owners and admins can change pricing, organization settings and team membership.
ActiveContinuous security testing
Every change to Ryvet must pass automated security scanning, dependency vulnerability checks and a required test suite before it can reach production, with no bypass. We also carry out in-depth internal security reviews and verify every fix against the live platform.
ActiveMonitoring and incident response
Automated monitoring watches the platform around the clock and alerts us immediately. We follow a documented incident response plan, and if an incident ever affects your data, we'll notify you directly and promptly.
ActiveSOC 2 and independent testing
We plan to pursue SOC 2 certification and independent third-party penetration testing as we grow. In the meantime we're happy to walk your security team through our controls, policies and architecture.
PlannedData Ownership
Your estimates stay yours
No AI training on your data
Your estimates, cost libraries and pricing data are never used to train AI models, ours or our AI providers'. We use them only to deliver and support your service.
No cross-account data sharing
Your pricing, material costs and labor rates are never shared with other accounts.
Your data, exportable
Export any estimate as PDF, CSV or Excel at any time. If you ever need a complete copy of your account data, just ask, and we'll deliver it in standard formats.
Deletion on request
If you close your account, we delete your data from our systems within 30 days and confirm in writing.
Questions about security?
We're happy to discuss our security practices, policies or roadmap, or to complete your security questionnaire.
Security reports and questions: security@ryvet.ai · General: hello@ryvet.ai