Your company data, kept in its place
You do not need to be a security expert to feel safe. Here is how RIVIL protects data: plainly, without big promises.
Separate data per company
Each company has its own database. Nothing mixes between companies. Company connection credentials are stored encrypted (AES-256).
Each person sees only what they need
Roles and permissions by module and area: reception does not see payroll, accounting does not see internal notes. You decide who gets what.
Two-factor authentication
Accounts can be protected with a code from an authenticator app (2FA). You can require it for all users in the company.
Logs so you know what happened
Access log (sign-ins, sign-outs, 2FA success or failure) and audit log for changes, visible to people with the right permissions.
API keys and webhooks under control
Separate keys per module, revocable anytime. Webhooks are signed so your app can verify the message came from us.
Public forms, protected
Public pages (booking, careers, reviews) have rate limits, bot protection, and do not leak internal data in responses.
What we do not claim
We do not display certifications we do not hold and we do not promise what we cannot prove. If you have special requirements, we put them on the table up front, before we start.
Audit requirements
Have an audit or vendor questionnaire? Tell us and we answer point by point.
Data processing agreement
For your clients' personal data we agree on a data processing agreement before launch.
Hosting and access
Where data lives and who can access it is decided together, based on what your company needs.
What people ask
Who can see another company's data?
Nobody. Each company has its own database, separate from the rest.
Can I require 2FA for everyone?
Yes. 2FA policy is set at company level: users must enable it to sign in.
How are candidate or client data kept?
Forms include consents you define, and for hiring you set retention and what happens after.
What happens to data from the site demo?
The site demo runs on a company with fake data and does not save what you submit.
How do I report a security issue?
Email hello@rivil.app. We review every message.
Questions about your company data?
We jump on a call and answer plainly. If you want, we can also set up a demo environment, 7 days free.