Trust Center
Security measures
Measures in service, domain by domain. Each one is backed by our technical and organisational measures annex or our data processing agreement.
Access control and authentication
- Strong authentication is required to access the solution's administration consoles.
- Named administrative roles carry a mandatory expiry date.
- A read-only auditor role allows oversight without any right to change data.
- Sensitive platform operations require four-eyes approval.
Encryption and secrets management
- Data is encrypted at rest, in the hosting region chosen by the customer.
- Traffic is encrypted in transit (TLS 1.2 or 1.3), including to the databases.
- Encryption keys are rotated every year.
- No secret is stored in configuration: secrets are kept in a dedicated vault.
- Customers can bring their own signing key. SEAL security sheet (sealing, key management) →
Logging and monitoring
- Every action is recorded in a time-stamped audit trail: actor, role, action, outcome.
- The audit trail is hash-chained and sealed daily, so any tampering is detectable.
- Customers can stream their audit trail to their own SIEM.
- Availability is measured continuously by external probes and published on a status page.
Vulnerability management
- Deployed images are scanned for known vulnerabilities and deployed by digest.
- Critical vulnerabilities are fixed within 14 days, high ones within 30 days.
- Vulnerabilities can be reported to security@we-reviewit.com under our responsible disclosure policy. Vulnerability disclosure policy →
Configuration and hardening
- No database is exposed to the internet; administration goes through controlled access with no public address.
- Only sealed releases, identified by their digest, are deployed to production.
Data protection
- Each subscription has its own databases.
- Data is hosted in the region chosen by the customer, Paris by default. Data location and transfers outside the EU →
- Retention periods are set per data category and purging is performed by the product. Retention and reversibility commitment →
- At the end of the contract, data is returned, then erased, and a deletion certificate is issued. Deletion certificate template →
Continuity, backup and incidents
- Databases are backed up automatically and backups are kept for 35 days. Backup and recovery strategy — summary →
- The infrastructure spans two availability zones.
- Any personal data breach is notified to the customer within 24 hours.
Suppliers
- Every sub-processor is bound by a data processing agreement assessed against Article 28 GDPR.
- Any change of sub-processor is announced to customers 30 days in advance.
- The list of our ICT service providers is available to customers, notably for their DORA register of information.
AI
- The RITA assistant can be switched off per subscription, and its default mode uses no generative AI.
- Conversations with RITA are never retained.
- Models run in the geography of the customer's region; any other route is refused.
- Customer data is never used to train models. AI transparency notice — RITA →
Version 1.0, published 4 Nov 2026 · French is authoritative · hash 996d079c8d4f48b0… Verify →