Trust Center
The evidence your security team will ask for
Your rules travel with your data: who may see which rows and columns is set once and holds in every report that data reaches. Below it, summaries of our architecture and threat model, our remediation SLAs and the sub-processor list, kept current with each release. Need something not listed? [email protected].
Data rules
Your rules travel with your data
-
Set once, held everywhere
Set who sees which rows and columns once. The rule holds in analysis, in the editor, in reader questions and in what gets delivered.
-
Rules set by your data owners
A rule binds every one of those paths when it is set by the owner of the source or a workspace owner or admin; a rule set by anyone else applies to their own report.
-
You can only publish what you may see
A report goes out with the publisher’s access, never more.
Index of documents
-
Security architecture
System architecture
Public summary of trust boundaries, identity sources, tenant isolation, data residency, and engineering commitments. Full document with internal services, data flows, and key-store layout is shared under NDA.
-
Security architecture
STRIDE threat model
Public summary of methodology (STRIDE across eight attack surfaces), scope, cadence, and remediation commitments. The full document (surface inventory, gap log, pen-test findings) is shared under NDA.
-
Process commitments
Vulnerability remediation SLAs
How quickly we acknowledge, mitigate, and fix security issues by severity. P0: 1h acknowledge / 4h mitigate / 24h fix. Quotable in your MSA.
-
Compliance
Sub-processor list
Every vendor that may process customer data on Rahoto's behalf, what it receives and where it operates. 30 days' notice before any addition.
What's public, what's NDA, what's not yet
Three honest disclosures
Why some docs are summaries, not full.
Our architecture and STRIDE threat model exist as full internal documents and are shared under NDA during procurement. We don't publish the full versions here because they'd be reconnaissance for an attacker and competitive copy material, and neither helps a legitimate buyer. The summaries above let your security team assess our maturity at the proposal stage.
What we don't yet claim.
Rahoto does not currently hold paid third-party attestations (SOC 2 Type II, ISO 27001, HIPAA, FedRAMP). We don't put badges on this page for certifications we haven't earned. When one is issued, it appears here with the auditor's report attached.
What you can have today.
Public commitments on SLAs and sub-processors. NDA-gated full architecture, threat model, and pen-test summary on request. Security questionnaires returned in 3-5 business days.
Questions?
Talk to security or talk to enterprise
Security team
For vulnerability disclosure, security questionnaires, threat-model questions.
[email protected]Enterprise team
For DPAs, MSAs, custom procurement, BYOK configuration, residency planning.
[email protected]