Security

This page is a plain-language template provided for review. Confirm each statement against your final infrastructure and have it reviewed by your own counsel before you rely on it publicly.

Our principles

• Read-only by default. On your systems of record, RevvOS reads and reports; it only writes or sends where you explicitly enable it.
• Human approval first. Customer-facing messages and financial actions start as drafts you approve, until a task earns more autonomy on your terms.
• Your data is yours. We never sell it, and we never share it for others' marketing.

Encryption

Data is encrypted in transit using modern TLS and encrypted at rest. API keys and credentials are stored encrypted and are never exposed in the interface.

Data location

Platform data is stored in the United States.

Runs on a machine in your shop

The AI models run locally on a dedicated machine that lives in your shop, not in a third-party cloud. Sensitive processing, such as transcribing your phone calls, happens on that machine and never leaves the building. Call audio is not resold, shared, or used to train outside models, and is handled with least-privilege access.

Access controls

• Staff logins are individual, and access to customer data is limited to what is needed to operate the service.
• Integration permissions are scoped to the minimum required, and you can revoke any connection at any time.

Subprocessors

We use a small set of reputable infrastructure providers to run the platform, under confidentiality obligations. A current list is available on request.

Reliability

We monitor uptime and system health continuously so issues are caught early. If the network is unavailable, the platform is designed to degrade gracefully rather than stop your shop.

Responsible disclosure

If you believe you have found a security issue, please email team@simplufy.com with the details. We appreciate reports made in good faith and will work with you to resolve them.

Contact

Security questions? Email team@simplufy.com.