Security

Revdoku is built with enterprise-grade security at its core. We understand that document compliance review involves sensitive data, and we take every measure to protect it.

High Security Mode

Revdoku supports enabling “high security mode” for organizations with strict data protection requirements. When enabled, high security mode enforces:

• Detailed Logging - extended logging with detailed events.
• Enforced 2-Auth - every user is required to setup 2FA.
• Configurable data retention with secure deletion procedures.
• Enforced Sessions Timeout for increased security.
• And other security features - contact us for the details.

High security mode is available on selected plans.

Infrastructure & Data Location

Revdoku server and file storage are hosted in the region selected by the customer during account creation.

Available data and computing locations:

• United States (Amazon AWS)
• European Union (coming soon)

Location Details: United States

Servers and Storage

Amazon Web Services (AWS) with military-grade encryption:

• AES-256 encryption at rest for all stored documents and data
• TLS 1.2+ encryption in transit for all network communication
• All data remains within US-based data centers

Read more about award-winning Amazon AWS infrastructure.

AI Processing

Revdoku uses the following AI models for document analysis:

• Google Gemini — hosted on Google Cloud US
• Anthropic Claude — hosted on Amazon Bedrock US
• OpenAI models — accessed via commercial API

Models are accessed directly via the providers’ cloud APIs and through OpenRouter, an AI API gateway that forwards requests to the underlying model provider. OpenRouter does not retain prompt or response content beyond what is needed to deliver the request.

None of these providers use customer data for model training. All services operate under commercial API terms, not consumer terms, ensuring your data is never used to improve AI models.

HIPAA Compliance

Revdoku can be used in a HIPAA-compliant mode for organizations handling protected health information (PHI) on Enterprise plans. We have BAA signed with our providers.

A signed Business Associate Agreement (BAA) is also available for Enterprise customers on request.

Learn more about HIPAA Compliance →

Open Source

Revdoku is open source. The full application code is at github.com/revdoku/revdoku — review how documents are processed, audit security claims against the actual source, or self-host for full data sovereignty.

Report security issues to [email protected] or via a private GitHub security advisory.

Deployment Options

• Cloud — Fully managed infrastructure with enterprise-grade security controls
• On-Premise — Deploy Revdoku on your own dedicated server for complete data sovereignty

Contact

For security inquiries or to request our security documentation, contact [email protected].

HIPAA Compliance | On-Premise Deployment | Source Code on GitHub | Pricing