Security
This page describes the security measures that are actually in place, not what sounds good.
Separation between companies
Each company's data is kept separate. The separation is enforced in the database with row-level security on every single table, so a faulty call from the browser cannot retrieve another company's rows. Revintia's own platform administrators have access across companies for operations and support.
Sign-in and two-factor
Passwords must be at least 10 characters. Two-factor authentication with a one-time code from an authenticator app can be enabled per user, and an administrator can make it mandatory for administrators or for everyone in the company.
Roles and permissions
Users have roles, such as administrator, technician, purchaser, shipping and HR, and each role sees only what it needs. Permissions are checked in the database and, for server functions, in the function itself.
Audit logging
Changes to customers and contact persons are logged with who, what and when. For cases, status changes, changes to the agreed price (with the reason given), prints and deletions are logged. The log is shown on the customer and the case to users who have access to them, and it answers questions such as ‘who changed the price?’ Neither the status history nor the other log entries can be edited or deleted by users. It is not a tamper-proof log: with administrative access to the database, we as the provider can still change the history.
Encryption and location
All traffic runs over TLS. Database and files are located in the EU, in Frankfurt. The database is copied every night to private storage in the same project, and the copies are kept for 30 days.
GDPR tools
The system can find a person by email address, extract the records linked to that address and anonymise contact persons at customers. Free text in cases, uploaded files, time registrations and absence are not included in the extract and must be gathered manually. A retention period for completed cases can be chosen per company; the system shows which cases are due for clean-up, and an administrator can move them to deleted cases. They can be restored from there; they are not permanently deleted. A data processing agreement is available.
What we do not promise yet
We hold no ISO or SOC certification, promise no guaranteed uptime, and have no agreed recovery time after an outage. We say this because a promise we cannot keep is worse than no promise.
Found a hole?
Write to us straight away. We will reply, and we will thank you. We will not take legal action against anyone who reports a problem in good faith.