Security

When you log in to Revela, we confirm your browser is running TLS 1.0 or higher, which secures the communication from your browser to Revela. Our data resides on servers that are protected both physically and electronically. Our platform edge is equipped with strong cipher suites controlled by Transport Layer Security (TLS). We offer two-factor authentication, an optional feature that helps safeguard your account at login. Our platform follows a responsible disclosure process to support and manage concerns reported by the community.

Our applications are hosted with Heroku, who’s physical infrastructure is hosted and managed within Amazon’s secure data centers and utilize the Amazon Web Service (AWS) technology. Amazon continually manages risk and undergoes recurring assessments to ensure compliance with industry standards. Amazon’s data center operations have been accredited under:

For more information, visit the Heroku Security page.

We also employ the following security requirements:

We also use various static security analysis tools such as Brakeman to prevent common vulnerabilities from being deployed.