Security
Your customers trust you with their feedback. We take that seriously.
Here is where Rirofeed keeps your data, how it is separated and backed up, and how it leaves Rirofeed when you send it to other tools.
Google Cloud, London
Rirofeed runs on Google Cloud in the London region (europe-west2), so your data is stored in the UK. Google Cloud encrypts stored data at rest by default.
Nightly database backups
The database is backed up every night, so data can be restored if something goes wrong.
One workspace, one set of data
Each workspace’s forms, responses, contacts and integrations are kept separate from every other workspace.
HTTPS everywhere
The app, public forms, walls and the API are served over HTTPS only.
Managed authentication
Standalone accounts sign in with Firebase Authentication. RiroCRM customers sign in from the CRM with single sign-on.
Consent on every testimonial
Rirofeed records the customer’s consent with every testimonial, so you know what you may publish.
When data leaves Rirofeed
Data only goes to the tools you connect, and only the events you choose. Every delivery is logged with its result.
- Webhooks are signed with HMAC-SHA256 using a secret you set, so your server can check each request came from Rirofeed. See webhooks & API.
- CRM connections use the token or key you provide, with the scopes listed on each integration page.
- API keys belong to one workspace and only reach that workspace’s data.
Your team’s access
- Invite team members to a workspace. The number of seats depends on your plan.
- Use separate workspaces for separate brands or clients, each with its own data.
- Export responses to CSV whenever you need the raw data.
Questions about security or data handling? Email hello@rirofeed.com.
Where is Rirofeed data stored?
On Google Cloud in London (europe-west2), in the UK.
Is my data backed up?
Yes. The database is backed up every night.
Can other workspaces see my data?
No. Each workspace’s forms, responses, contacts and integrations are kept separate from every other workspace.
How do I verify that a webhook came from Rirofeed?
Set a signing secret on the webhook. Rirofeed signs every request with HMAC-SHA256 of the body in the X-Rirofeed-Signature header, which your server can check.