Security and privacy

Workspace isolation

Every row of product data belongs to a workspace and is filtered by the database itself, through row-level security, rather than by application code remembering to add a condition. A query that forgets the workspace returns nothing rather than returning someone else's leads.

That boundary is tested directly: the test suite signs in as one workspace and attempts to read, insert, update and delete another's rows, and asserts each attempt fails.

What Rederva can do on Reddit

Read, and only read. The product has no capability to post, vote, message or follow — there is no credential that would allow it and no plan that unlocks it. That boundary is structural rather than a policy: the code that reads Reddit has no method that writes.

How the reading happens, honestly. Reddit requires a commercial agreement to use its Data API for a product like this. Ours is applied for and has not yet been granted, so in the meantime Rederva reads public Reddit posts through a third-party social data provider rather than directly from Reddit. Only public content is read, and only content anyone could see without an account.

We would rather read directly, and will as soon as we can. This page will say so when that changes.

Your Reddit account is never connected to Rederva, because nothing it does requires one.

Where data lives

The database is hosted in London (eu-west-2). Content Rederva stores is public Reddit material plus what you type into your monitors.

Access to your account

Sign-in supports multi-factor authentication. Administrative access to the service is separately gated and additionally requires a second factor, so a password alone is never sufficient for it.

Secrets — API credentials, database keys — are held in the hosting platform's secret store. None are in the source code.

Reporting something

If you find a security problem, mail the contact address on the contact page rather than posting it publicly, and you will get a reply.