Trust at Riven
We run a single-tenant, self-hosted AI platform. This page collects the artifacts you need to evaluate us: our security whitepaper, data processing addendum, subprocessors list, and compliance roadmap.
Security whitepaper
Architecture overview, tenant isolation model, encryption at rest and in transit, and key management posture.
Read whitepaper →Data Processing Addendum
Standard DPA covering GDPR/CCPA processor obligations, sub-processor engagement, and international transfers (SCCs).
Request DPA →Subprocessors
Full list of infrastructure and model providers with data category, region, and purpose.
View list →Compliance program
SOC 2 Type I in flight (target Q4 2026); SOC 2 Type II follows. HIPAA readiness on the Enterprise Max plan roadmap.
Contact security →Report a vulnerability
Email [email protected] with steps to reproduce. We acknowledge within 48 hours and aim to resolve critical issues within 7 days.
Last updated: 2026-08-31.