Security

Overview

Reqme is a cloud SaaS hosted on major cloud infrastructure. We apply
security controls appropriate to a B2B service handling business and personal data.

Infrastructure

• Hosting on AWS (us-east-1, USA).
• Data encrypted in transit (TLS) and at rest (AES-256).
• Network isolation and least-privilege IAM.

Application

• Authentication via JWT with mandatory two-factor email verification.
• Role/tenant isolation on data access.
• Signed webhooks and payment provider verification.

Data protection

• Retention limits, including a 30-day cap on AI interaction records.
• Sub-processors listed at reqme.co/subprocessors.
• Data export and deletion on request.

Vulnerability reporting

Report suspected vulnerabilities to
hi@reqme.co.