Security

Security and data handling, stated plainly.

What we hold, how data is protected, where it is stored, and what is on the roadmap. Data processing terms and our recording-consent workflow are available on request.

Talk to us Email us a questionnaire

Today

What we can state today.

Standards

  • ISO 27001 An information security management standard we hold.
  • SOC 2 We follow SOC 2 compliance practices.
  • CCPA-aligned data handling Our data handling is aligned with CCPA requirements.

Encryption

  • Data in transit TLS 1.3 mandated.
  • Data at rest AES-256.
  • Customer-managed keys Available for enterprise customers, through AWS KMS.

Data residency

  • United States Customer data can be stored in the United States.
  • Canada Customer data can be stored in Canada.

Control and access

  • CSV-first control Available as an option. You can choose to start from exports you control.
  • Zero data retention Available.
  • Limited access Customer data stays encrypted. RevSage staff access it only when absolutely needed, for example to resolve a support issue.

Roadmap

On our roadmap.

Not available yet. Listed so you can plan around them.

  • SAML 2.0 Single sign-on for your identity provider.
  • SCIM provisioning Automated user provisioning and deprovisioning.
  • Okta A native Okta integration.
  • Azure AD A native Azure AD integration.

Questions

What your security team will ask.

Where is our data stored?
In the United States or Canada.
Who at RevSage can see our data?
Customer data stays encrypted. Our staff access it only when it is absolutely needed, for example to resolve a support issue.
Do you hold any security certifications?
We hold ISO 27001. We also follow SOC 2 compliance practices and handle data in line with CCPA.
Do you retain our recordings?
Zero data retention is available. We agree retention terms with you.
Can we get a data processing agreement and see the recording-consent workflow?
Yes. We share both on request, together with the subprocessor list.
Do you support SSO and automated provisioning?
SAML 2.0, SCIM provisioning, Okta, and Azure AD are on our roadmap.
Can we manage our own encryption keys?
Customer-managed keys through AWS KMS are available for enterprise customers.
Can we send you a security questionnaire?
Yes. We answer from what is true today and say clearly where something is not yet in place.

Send us your security questions.

We would rather answer them early than have them surface late.

Talk to us Email us