RichReach apps are designed to support important operational data and workflows. Security is considered across architecture, access, development and day-to-day operations.
Identity and access
Access should follow the principle of least privilege, with role-based permissions and appropriate authentication controls configured for each organisation.
Data protection
We design for secure transmission and storage of business information, with safeguards appropriate to the service and deployment context.
Application security
Our engineering approach includes code review, dependency management, environment separation and remediation of identified vulnerabilities.
Operational resilience
Monitoring, backup and recovery arrangements are designed according to the relevant app, service agreement and customer requirements.
Responsible reporting
If you believe you have found a security issue, please contact sales@richreach.io with enough information for our team to investigate responsibly.
Specific certifications, hosting arrangements, encryption standards and service commitments should be confirmed in the applicable app documentation or customer agreement.