Trust & compliance
How SiteRevive protects workspace data, who processes it, and the agreements available to customers.
This is an evidence trail — not a certification.
SiteRevive publishes a documented, good-faith evidence trail: an inventory of what is encrypted and how, a current list of the companies that process data on our behalf, and a fill-in data processing agreement (DPA) template. Access logging is built but not yet switched on — see below. This is not a certified SOC 2 audit, and no certification or third-party attestation is claimed.
Evidence documents
- Encryption inventory
How data is protected at rest and in transit, plus secrets handling.
- Subprocessor list
The third-party services that process data on our behalf, and why.
- DPA template
A fill-in Data Processing Addendum template (not an executed agreement).
Access logging
Access logging is not implemented yet. The storage for the log, the per-workspace lookup, and an owner-only viewer are all built, but no part of the application writes to that log today, so it is empty for every workspace. A workspace owner can see the viewer in-app at Trust & compliance → Access logs.