Security
Who we are
Rivier is a product of PRAECISE LTD (registered in England and Wales, company number 15567058), 86-90 Paul Street, London, England, EC2A 4NE. In this document "we" and "us" mean PRAECISE LTD, which is the business responsible for Rivier and the party you deal with.
About this page
This page describes in plain words how PRAECISE LTD protects the information people put into Rivier. It describes what we do; it is not a guarantee, because no system is perfectly secure. It makes no claim that we hold any security certification.
Where it runs
PRAECISE LTD runs Rivier on its own hosting service, Furcate, on servers it operates itself. It does not use a third-party cloud platform to host Rivier. Some features use outside providers, for example for payments, email delivery and AI models; they are listed by kind at /providers.
Who can see what
Each workspace's information is kept apart from every other workspace's: the application checks which workspace a request is for on every request.
People sign in with an account. A session is kept in a cookie that scripts on the page cannot read. Keys given to software are limited to the permissions chosen when the key was made.
Actions outside the business
Actions that go outside the business, such as publishing, sending messages or spending money, wait for a person's approval unless you have set a rule that allows them. Every action, and every time one was refused, is written to a record of activity that you can read.
Connected accounts
The credentials for accounts you connect are stored sealed, are not shown back to anyone and are not written to logs. You can disconnect an account at any time.
In transit
Information moves between you and Rivier over encrypted connections (HTTPS).
AI assistants
AI assistants act through the same permissions as any other user of the workspace, and their actions are recorded in the same activity record. See https://rivier.ai/ai-disclosure.
If something goes wrong
If a security incident affects your information, we will tell you and the authorities as the law requires, without undue delay.
Reporting a security problem
Security reports and requests from people about their data go to the same contact. To report a security problem, write to PRAECISE LTD, 86-90 Paul Street, London, England, EC2A 4NE or contact@praecise.com. Please give enough detail for us to reproduce it and do not access other people's information.