Live system of record · All systems operational
Trust is a design decision, not a checkbox.
Encryption on by default. TOTP mandatory on every sign-in. Every edit hash-chained. Every export signed. Every backup verified.
Certifications
SMB1001 Gold Level 3
Independent posture certification for security-mature SMBs.
TLS 1.3 Everywhere
Strict HSTS enforcement on every response.
AES-256 at rest
Every collection, every backup — encrypted at storage layer.
Mandatory TOTP 2FA
Fernet-encrypted secrets. No SMS fallback, no bypass.
Security posture
A private system of record.
Enterprise-grade security
- AES-256 encryption at rest across every tenant collection
- TLS 1.3 in transit with strict HSTS enforcement
- Continuous automated vulnerability + dependency scanning
- Penetration tested bi-annually by CREST auditors
Identity & access control
- Mandatory TOTP two-factor on every sign-in
- Default-deny, per-role RBAC across every mutation
- Suspend a user or tenant from the super-admin console
- Signed HMAC invitation tokens with 24-hour expiry
Data privacy & integrity
- SHA-256 hash-chained immutable audit log
- Encrypted 12-hour off-site backups with SHA verification
- Zero LLM training on customer registers or documents
- Sovereign Australian & regional storage options
System status
90 days of uptime.
API
100% · 9 days monitored
Operational
90 days agoToday
Database
100% · 9 days monitored
Operational
90 days agoToday
Email delivery
100% · 9 days monitored
Operational
90 days agoToday
Security contact
Coordinated disclosure, welcome.
Found something we should know about? Email security@riskeye.io — encrypted with our PGP key on request. We reply within one business day.
Incident transparency
Customer-impacting incidents are disclosed on this page within 24 hours with a post-mortem within seven days.
No incidents in the last 90 days.