How we protect your data, your agents, and the infrastructure they run on.
Last updated: September 8, 2026
Security is a shared responsibility. We build the platform to be secure by default — org-scoped API keys, guardrails, and versioning are on from day one — and we give you the controls to configure agents, tools, and integrations safely for your use case.
The Service runs on reputable cloud infrastructure providers with physical, network, and hypervisor-level protections. Production environments are isolated from development and staging, and access is restricted to authorized personnel.
Data is encrypted in transit using TLS and at rest using industry-standard encryption. API keys and credentials for connected model providers and tools are stored using secrets management designed so that raw values are never exposed in logs or dashboards.
We enforce role-based access within workspaces, so teams can scope who can create, edit, or deploy agents. Internally, employee access to production systems follows least-privilege principles and is logged and reviewed.
When you connect a model provider (Anthropic, OpenAI, Bedrock, or others) or an MCP server, requests are routed directly to that provider under the credentials you supply. We recommend reviewing each provider's own data handling and retention policies, since they process the content of your requests independently of RevSpinup.
We monitor the Service for anomalous activity and maintain an internal incident response process. If we become aware of a security incident affecting your data, we will notify affected customers in accordance with applicable law and our contractual commitments.
If you believe you've found a security vulnerability in the Service, please report it to security@revspinup.com. We ask that you give us a reasonable opportunity to investigate and address the issue before public disclosure.
We continue to invest in third-party audits and certifications as the platform scales. Current compliance status and available documentation (such as SOC 2 reports) can be requested from our team for enterprise evaluations.
For security questions or to request documentation, email security@revspinup.com.
Reach out to our team and we'll get back to you.