Run your business on something trustworthy.
Security, privacy, uptime, and compliance: the stuff that should be straightforward, made transparent. Everything you need to evaluate rtylr before you commit.
Six things we take
seriously every day.
Security program
Formal information-security program aligned with ISO 27001 and SOC 2. Reviewed quarterly.
Learn more →Encryption
TLS 1.2+ in transit. AES-256 at rest. Separate backup regions. Secrets managed in a vault.
Learn more →Access control
SSO + mandatory MFA for production. Least-privilege access, quarterly reviews.
Learn more →Infrastructure
Cloudflare edge, Firebase / GCP managed services, multi-region backups with PITR.
Learn more →24/7 monitoring
Continuous monitoring and alerting. Documented incident-response runbook. 72-hour breach notifications.
Learn more →Vulnerability management
Dependencies scanned on every build. Annual third-party pen test. Critical CVEs patched within 7 days.
Learn more →Where we are.
We publish our compliance status transparently, certified, aligned, or in progress.
Need our security packet, SIG, or DPA?
Email [email protected] and we'll send the current packet under NDA within 7 business days, including the latest status of our SOC 2 Type II audit.
- GDPR / UK GDPRCompliant
- CCPA / CPRACompliant
- PCI DSSVia Paddle (Level 1)
- SOC 2 Type IIIn progress · Q4 2026
- ISO 27001Aligned, not yet certified
- HIPAANot applicable
Where your data lives, and how you can take it with you.
Customer Data is hosted in the cloud region that best matches your workspace settings. EU-region hosting is available on request for customers with data-residency requirements. You can export your full workspace (CSV, XLSX, or API dump) at any time from settings. On account termination, your data is retained for 30 days for recovery, then deleted within 60 days from live systems and within 90 days from backups.