Last Updated: March 6, 2026
Security Philosophy
RevEdge.ai is designed to help organizations securely analyze revenue and operational data while maintaining appropriate protections for customer information.
Security is incorporated into platform design, infrastructure management, application development, and operational processes.
Infrastructure Security
RevEdge is hosted on Microsoft Azure.
Security controls include:
- encrypted data storage;
- encrypted network communications;
- network segmentation;
- infrastructure monitoring;
- backup and recovery procedures;
- access logging.
Data Protection
Customer Data remains owned by the Customer.
RevEdge processes Customer Data solely to provide and support the Services.
Customer Data is protected through:
- encryption in transit using TLS;
- encryption at rest;
- access control policies;
- role-based permissions;
- authentication controls.
Access Management
RevEdge limits access to systems and Customer Data based on business need.
Controls include:
- role-based access controls;
- least-privilege principles;
- credential management procedures;
- employee confidentiality obligations.
Application Security
RevEdge follows secure development practices designed to reduce security risk throughout the software lifecycle.
Practices may include:
- code review procedures;
- vulnerability remediation;
- dependency management;
- change management controls;
- environment separation.
Monitoring and Incident Response
RevEdge maintains monitoring capabilities designed to identify:
- unauthorized access attempts;
- infrastructure anomalies;
- operational disruptions;
- security incidents.
If a confirmed security incident affects Customer Data, RevEdge will notify affected customers without undue delay and provide information reasonably necessary to support investigation and remediation activities.
Vendor Management
RevEdge utilizes carefully selected third-party providers to support platform operations.
Current subprocessors are listed in the RevEdge Subprocessor List.
RevEdge evaluates service providers for security and operational suitability prior to engagement.
Artificial Intelligence Security
RevEdge AI-assisted functionality operates within the same security controls applied to the broader platform.
Customer Data is not used to train publicly available foundation models.
AI-generated outputs are intended to support human decision-making and are not autonomous business decisions.
Compliance and Privacy
RevEdge maintains policies and procedures designed to support compliance with applicable privacy and data protection laws, including:
- GDPR
- UK GDPR
- CPRA
- applicable U.S. state privacy laws
Security Contact
security@revedge.ai
privacy@revedge.ai
support@revedge.ai
