Security

Security and data practices

Your client records are your business. Here is how we look after them.

Encryption

All traffic to Riser uses HTTPS (TLS). Data is encrypted at rest by our database provider.

Workspace isolation

Every record belongs to one workspace, and row-level security in the database stops one workspace from reading another's data. Team members see only what their role allows, including whether they can see prices and margins.

Accounts

Sign-in is protected by hashed passwords and rate limiting. API keys are stored hashed and can be revoked at any time.

Backups and export

The database is backed up daily. Account owners can export their whole workspace and erase a customer's personal details on request.

Payments

Card details are handled by Paddle and never touch Riser's servers.

Reporting an issue

If you find a security issue, email [email protected]. We respond quickly and credit responsible reports.