Security and data
How RiskRover handles access and data
RiskRover is operated by Be-Sure bv in Belgium. Review the information below when evaluating the product, and contact us for organisation-specific requirements or a data processing agreement.
Application security and data handling
These summaries describe the current service. The linked policies explain the scope, providers and exceptions.
- Hosting regionCombell hosts the primary RiskRover application infrastructure and application data in Belgium. Other service providers may process information in other countries.
- EncryptionProduction requires HTTPS. Integration credentials and public-form fields are encrypted at rest; this is not a claim that every stored field is encrypted.
- Access controlWorkspace and project roles control access. Personal API tokens have read-only or read-and-write permissions for supported endpoints.
- Data retentionAccount closure requests remove associated data from active systems, subject to access checks and legal exceptions. Contact privacy@riskrover.io for the current backup retention and deletion schedule.
- AuthenticationPassword hashing, session and CSRF protections, and optional two-factor authentication support account security.