Security

AI that operates inside business controls.

RINADS is designed so assistance, recommendations, and supported actions stay inside organisation context, permissions, and human approval where required.

Compliance certifications are not claimed on this page. No SOC 2, ISO 27001, GDPR, DPDP, HIPAA, or uptime SLA is asserted unless separately verified and counsel-approved.

Security overview

In progress

RINADS is designed so AI assistance operates inside organisation context, permissions, and human approval where required.

Identity & authentication

Implemented

Organisation membership and authenticated sessions gate product access.

Tenant isolation

Implemented

Business data access is organised around organisation context rather than a shared global workspace.

Permissions

Partial

Product actions are intended to respect the same authorization boundaries as the operating system.

Human approval

Partial

Sensitive or meaningful actions can be held for review instead of treating AI output as automatic authority.

Audit / event architecture

Partial

Event and audit primitives exist so important system activity can remain traceable.

Data handling

In progress

Data handling practices will be published in counsel-approved privacy and DPA materials.

AI / model providers

Not currently claimed

Model provider use depends on deployment configuration. No blanket retention or training claim is published here.

Encryption

Partial

Transport encryption is used for public HTTPS surfaces. Broader encryption claims require verified inventory.

Backup & recovery

Not currently claimed

Backup and recovery posture depends on the deployed environment and is not published as a universal SLA here.

Secure development

In progress

Secure development practices are evolving with the platform. Formal programme claims are not published yet.

Incident response

Planned

Incident response process will be published when counsel-approved and operationally ready.

Subprocessors

Planned

See /legal/subprocessors when the counsel-approved list is published.

Compliance status

Not currently claimed

No SOC 2, ISO 27001, GDPR, DPDP, or HIPAA compliance certification is claimed on this page unless explicitly verified and approved.

Vulnerability reporting

Planned

Report suspected vulnerabilities through the security contact channel below.

Security contact

Partial

Use /contact?intent=security or the company contact path for security questions.

Questions about security posture or subprocessors? Contact the team or review subprocessors.