Revexa

Trust & security

How Revexa protects your business and customer data.

This page is maintained by Revexa to answer the common security and privacy questions we get during evaluation. It describes controls that are live in the product today — it is not an independent audit or certification.

Shared responsibility. Revexa secures the platform, its access controls and its infrastructure. You remain responsible for who you invite into your account, the credentials you connect, and the messages your team sends to your customers.

Access and authentication

  • Every account is protected by email/password or Google sign-in, with password strength rules enforced at sign-up.
  • Roles separate business owners, staff and technicians, and administrative tooling is limited to authorized Revexa staff.
  • Session length and login attempt limits are configurable by Revexa administrators.

Tenant isolation

  • Each company's calls, customers, opportunities and financial records are stored under that company's account.
  • Database-level row security rules restrict every record to the company that owns it; requests without a valid session return nothing.
  • Public pages such as booking links use single-purpose links that expose only the details needed to complete that action.

Data in transit and hosting

  • Traffic to Revexa is served over HTTPS/TLS.
  • The application and database run on managed cloud infrastructure with automated backups handled by the platform provider.
  • Secrets such as integration credentials are stored server-side and are never exposed to the browser.

What we collect and why

  • Business data you connect or enter: calls, customers, appointments, estimates, invoices and recovery activity.
  • Marketing enquiries: the contact details you submit on our demo and contact forms, used only to respond to you.
  • We do not sell customer data or share it with advertisers.

Integrations and subprocessors

  • Telephony data is received from the phone provider you connect (for example Twilio) via signed webhooks.
  • Payment processing for subscriptions is handled by Stripe; Revexa does not store card numbers.
  • AI-assisted reply suggestions are generated on request and are always reviewed by a human before sending.

Retention and deletion

  • Your data is retained for as long as your account is active.
  • You can request export or deletion of your company's data at any time by contacting our team.
  • Demo and marketing enquiries are removed on request.

Reporting a security issue

  • Email our team at security@revexa.com with details of the issue and steps to reproduce.
  • We acknowledge reports and will keep you updated while we investigate.
  • Please do not test against other customers' data.

Need a security review before you buy?

We'll walk your team through architecture, access controls and data handling.

Talk to our team