Skip to main content
RAVIONIX Beta, home
Back to RAVIONIX

Trust Center

How we earn your trust.

What RAVIONIX does with your data, where our security programme stands today, and what we have not done yet, stated plainly. Every claim on this page is meant to be checkable.

Reviewed September 2026

Where we stand today

RAVIONIX is built and run by a small, independent team. We describe our security posture in the terms that are true today and update this page when that changes.

  • Privacy by design: what you check is hashed at the edge, and we keep only a one-way hash, the verdict and the AI's reasoning — never the full link, message or password. If a check is rated a scam with 80%+ confidence, we also keep the website's domain name, never linked to you. Domains confirmed as scams after human review may be published in a public blocklist used by RAVIONIX Guard; unconfirmed names are deleted 90 days after they were last flagged.
  • We are preparing for SOC 2 and ISO 27001; no controls have been independently assessed yet.
  • No certification is held today. Our roadmap covers SOC 2, ISO 27001, ISO 42001 and ISO 27701, triggered by customer requirements.
  • An independent penetration test has not been performed yet. It is planned, and this page will say so when it has happened.
  • We completed an internal security review of the whole codebase in September 2026, fixed the high-priority issues it found, and track the rest.

Your data

We do not sell your data, show ads or use cross-site trackers, and our AI provider does not train on the data we send it.

  • Our servers and database are in the United States; Cloudflare's edge network handles requests close to where you are.
  • Account holders can export or delete their data from settings, at any time, without emailing us.
  • Each customer's data is kept separate: every request is checked against the account it belongs to.
  • Security-relevant events are written to an audit log that is locked against editing or deletion and kept for up to 2 years.

Who processes data for us

We use a small set of providers. Most include a data processing agreement in their standard terms; Have I Been Pwned is covered by its own terms of use. The providers are: Vercel (hosting), Cloudflare (edge and bot protection), Neon (database), Upstash (rate limiting), Clerk (sign-in), Stripe (payments), Anthropic (AI verdicts), Have I Been Pwned (breach data), Resend (email), Sentry (error tracking) and PostHog (product analytics). Full details are in our Privacy Policy.