Security Commitment.
We take security seriously and implement comprehensive measures to protect your data and ensure compliance with industry standards.
Compliance
We adhere to the highest security standards and follow SOC 2 (Type II) trust services principles to ensure your data is protected.
Organizational Security
Information Security Program
- •Follows SOC 2 Framework criteria
- •Communicated throughout organization
Third-Party Audits
- •Independent assessments of security and compliance controls
Roles and Responsibilities
- •Clearly defined and documented
- •Team members review and accept security policies
Security Awareness Training
- •Covers industry standard practices
- •Topics include phishing and password management
Confidentiality
- •Team members sign confidentiality agreements
Background Checks
- •Performed on all new team members per local laws
Cloud Security
Hosting & Infrastructure
- •Hosted on Amazon Web Services (AWS)
- •Data hosted in United States databases
Encryption
- •Data encrypted at rest
- •Data encrypted in transit via TLS/SSL
Vulnerability Scanning
- •Regular automated scans of all systems
Logging and Monitoring
- •Active logging and monitoring for security events
Business Continuity
- •Business continuity and disaster recovery plans
Incident Response
- •Established incident response process
Access Security
Infrastructure Access
- •Limited infrastructure access based on need
Authentication
- •Single Sign-on (SSO)
- •Two-factor authentication (2FA)
Access Control
- •Least privilege access control
- •Quarterly access reviews
Password Management
- •Strict password requirements
- •Company-wide password managers
Vendor and Risk Management
Annual risk assessments
Regular evaluation of potential security risks across the entire infrastructure and organization.
Vendor risk management process
Thorough vetting of third-party service providers before any integration or data sharing.
Subprocessors
AWSCloud Hosting
Google/GeminiCloud Processing
Neo4jCloud Storage
Contact for Security Issues
Security concerns or vulnerability report?
Please contact our security team at:
infosec@rivio.aiAnyone outside Rivio can use this address to report a security, confidentiality, integrity or availability failure, incident, concern or complaint. No account is required, and every report is triaged by our security team under our incident response process.