Security
Installation records include network addresses, serial numbers and details about your customers’ sites. Here is how Revloy protects them.
Every project, room, device, file and log entry belongs to one company. Requests are checked against the signed-in member’s company, and records from other companies are never returned.
Uploaded files are stored privately and never get a public address. Each download uses a link created for that request, which expires after 10 minutes.
The client portal opens from a long, random link. Disable it or replace it with a new link at any time, and see how often and when it was last opened.
Files are checked against their actual content, not just their name. Executables and scripts are blocked, and each document category only accepts the file types that belong in it.
The app records whether system credentials were transferred to the customer and when. It never stores the credentials themselves.
Email addresses are verified before anyone can open a project. Members can turn on two-factor authentication with recovery codes, or sign in with a passkey.
Owners, admins, project managers and technicians each have a defined set of permissions. Only the owner can delete the company account.
Changes to projects, rooms, devices and checklist items are recorded with who made them and when, so owners and admins can see what happened.
Deleted projects and companies are kept for a 30-day recovery period, then permanently removed along with their files.
Subscriptions are processed by Stripe. Card details are entered on Stripe’s pages and are never stored by us.
Please email the details to hello@example.com so we can look into it.
Set up your company in minutes, invite your technicians and capture the next install as it happens.
Private beta. Request access at hello@revloy.com. Have a key? Sign up.