Overview of our security measures

From day one, we have gone to great lengths to ensure our processes and solutions are secure. To organisations, big or small, using our services, data management is a priority.

Third-party certifications

Revers AI is compliant to several security certifications including ISO27001 and Cyber Essentials. These certifications are obtained following a strict and thorough review of the information security measures and processes we have in place. These reviews are carried out by independent third-party specialists and reassessed frequently.

End-to-end encryption

Revers AI encrypts all data in transit and at rest. This ensures that, in the unlikely event of a breach, sensitive data could not be accessed in plain text. Essentially adding several layers of complexity to maliciously reaching your data.

GDPR-compliant

Revers AI is compliant with the EU General Data Protection Regulation (GDPR), under the Data Protection Act 2018. This ensures the personal data that may flow through our solutions is secure. To learn more, you can refer to our privacy notice.

Certifications

Certificate No: 329312021

Cloud & network

Unless otherwise requested, our infrastructure and services are hosted with Amazon AWS.
AWS are, therefore, responsible for the security of the infrastructure (including physical access).
‍Read AWS security policies.

To add a layer of security on top of the infrastructure, we encrypt all the data we send, receive, or host. Data is encrypted in transit with X.509 certificate-based RSA-2048 SSL encryption. Both in transit and at rest, data is encrypted using the industry-standard AES-256 encryption algorithm.

Our internal security team (IST) works in tandem with external teams of professionals to ensure all systems are monitored and operational.
‍
Talk to an expert

Codebase & environment

To protect ourselves from shipping faulty or vulnerable code, we have adopted a strict quality assurance (QA) process.

Our codebase is reviewed through both manual and automated tests. All code is built and tested by our CI/CD pipeline, ensuring no failing builds can be inadvertently deployed, mitigating the risk of bugs being pushed to production.

To avoid cross-contamination and data leaks, we keep staging and development environments separate from the production environment. This ensures real product and personal data is never used in our test environments.
Talk to an expert

Access & APIs

Access to data and backend services is governed by a strict permission structure. This structure allows us to grant access on a highly granular level.

Access to each environment (staging, development, and production) is manually granted to authorised personnel. Once granted access, all personnel must use multi-factor authentification.

Access to data through APIs and SDKs is done through keys, tokens, and secrets.
‍
Talk to an expert

Policies & training

All ubisend employees must complete and successfully pass security training. During security training, a qualified instructor covers all the points above including network access, password policies, clear desk policies, and more.

Whenever required, the Information Security Management Team (ISMT) updates the workforce of any changes to our policies.

All our employees must sign non-disclosure and confidentiality agreements (NDAs).
‍
Talk to an expert

Enter the future

Seize the opportunities of conversational AI and sign up for exclusive updates

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Information
ResourcesBlogRevers AcademyBecome a Partner
Contact
Located in Norway:
Drammensveien 145
0277 Oslo
Contact@revers.ai
Copyright © 2024 Revers AI. All Rights Reserved.