Security at Reliabilytics

Reliabilytics runs on established, independently audited cloud infrastructure providers. Data is encrypted in transit (TLS 1.2+) and at rest by our hosting providers. Production access is restricted to authorised personnel on a least-privilege basis.

• Role-based access control within customer accounts.
• Tenant isolation — your data is never visible to other customers.
• Audit trails on maintenance and compliance records (timestamps, user attribution).
• Dependencies monitored and patched as part of our release process.

We operate in line with UK GDPR. See our Privacy Policy and Data Processing Addendum. We do not sell personal data, and AI features process your documents only to deliver the output you requested.

As an early-stage company we do not yet hold formal certifications such as ISO 27001 or SOC 2; our practices are designed with those frameworks in mind and certification is on our roadmap. We're happy to complete security questionnaires — ask via hello@reliabilytics.com.

Found a vulnerability? Please report it to hello@reliabilytics.com with “Security disclosure” in the subject. We acknowledge reports promptly, will not pursue good-faith researchers, and credit fixes where wanted.