Skip to main content
We’re upgrading Seclum to RAVIONIX.
Back to RAVIONIX

Trust Center

How we earn your trust.

What RAVIONIX does with your data, where our security programme stands today, and what we have not done yet, stated plainly. Every claim on this page is meant to be checkable.

Reviewed September 2026

Where we stand today

RAVIONIX is built and run by a small, independent team. We describe our security posture in the terms that are true today and update this page when that changes.

  • Privacy by design: what you check is hashed at the edge, and only the hash and the verdict are stored, never the raw link, message or password.
  • ISO 27001 controls operational (not certified). OWASP ASVS Level 2 controls implemented.
  • No certification is held today. Our roadmap covers SOC 2, ISO 27001, ISO 42001 and ISO 27701, triggered by customer requirements.
  • An independent penetration test has not been performed yet. It is planned, and this page will say so when it has happened.
  • We completed an internal security review of the whole codebase in September 2026 and fixed the issues it found.

Your data

We do not sell your data, show ads or use cross-site trackers, and our AI provider does not train on the data we send it.

  • Our services run in the United States.
  • Account holders can export or delete their data from settings, at any time, without emailing us.
  • Each customer's data is kept separate: every request is checked against the account it belongs to.
  • Security-relevant events are written to an audit log that cannot be edited or deleted (kept for up to 2 years).

Who processes data for us

We use a small set of providers. Most include a data processing agreement in their standard terms; Have I Been Pwned is covered by its own terms of use. The providers are: Vercel (hosting), Cloudflare (edge and bot protection), Neon (database), Upstash (rate limiting), Clerk (sign-in), Stripe (payments), Anthropic (AI verdicts), Have I Been Pwned (breach data), Resend (email), Sentry (error tracking), PostHog (product analytics) and INCLUXA (accessibility tools on our website). Full details are in our Privacy Policy.