Razviel Trust
Built to be trusted.
Razviel operates inside one of the most sensitive layers of a commerce business: your customers, your orders, your money. Our security is architectural, not a promise on a page.
01Partnership
We build the walls. You write the rules.
Delegating the work is not handing over the decisions. The limits Razviel works inside are values your brand sets, and the architecture is designed to hold them.
Built in by Razviel
- Each store in its own workspace
- Credentials no Human Node or dashboard user can readCredentials no Human Node or dashboard user reads
- Deterministic checks before money moves
- An end-to-end record on every ticket
- Escalation, not improvisation, on failure
Defined by you
- Your policy, per case, customer segment and action
- The value limit on every one of those rulesThe value limit on each of those rules
- Who on your team holds which role
- Customer memory and segmentation, on or off
- Disconnecting, after which your data is deleted within 30 daysDisconnecting: your data deleted within 30 days
03Isolation
One store. One vault.
By design, each store is its own workspace: its own database, its own keys, its own evidence. No workspace has any connection to another.
-
One of each, per store
Eight pieces, and your store gets its own of each.
Every piece that serves your store serves only your store. No credential, key, connection or permission serves two.
- 01Your store
- 02Your helpdesk
- 03Database
- 04Encryption keys
- 05The part that reads
- 06The part that decides
- 07Evidence store
- 08Model key
-
Nothing crosses between brands.
No customer data, in any form, crosses from one customer’s account to another. Razviel operates no cross-customer improvement.
-
No model trained on your data.
Razviel does not train AI models on merchant or customer data obtained through a commerce platform, with or without consent.
-
No operation decrypts your whole history.
Not for anyone, your own team included. A limited, logged path could still be abused slowly. One that does not exist cannot.
04Security & privacy
Evidence, not badges.
Razviel holds no third-party certification today, and says so first. What it offers instead is in writing, in contracts published here.
-
Keys and encryption
Apart from your data, one key per ticket
The key that unlocks your data is designed to live apart from it, and each ticket is sealed with a key of its own.
-
Access
A second factor on every sign-in
A second factor on every sign-in. A Human Node reaches only their assigned tickets and the queue of brands they are certified for.
-
Privacy
No sale, no sharing, CCPA Service Provider
No sale of personal information and no sharing for cross-context advertising. Contracted as a Service Provider under the CCPA, with the nine commitments in writing.
-
Transfers
Standard Contractual Clauses, always on
EU and UK transfer terms, the Standard Contractual Clauses and the UK Addendum, are built into the DPA and always on.
-
In your browser
Dashboards load nothing from another origin
Our dashboards load nothing from another origin: no outside script, stylesheet, font, image or frame.
05Reliability
When something fails, it escalates.
When a step cannot be done safely, Razviel does not attempt it. By design, the ticket goes to your own helpdesk.
-
Degrade to escalation
Stops touching money and credentials
If a dependency fails, Razviel stops touching money and credentials and sends the ticket to your helpdesk. Your customer is still answered, by your own team.
-
Contained per store
Restricting one store never restricts another
Containment is set store by store. Restricting one store never restricts another.
-
Done means confirmed
Recorded as done only after the platform confirms
A money action either happened or it did not. It is recorded as done only after the platform confirms it.
06People
Humans are inside the control system too.
Human Nodes are independent service providers under contract with Razviel, bound by confidentiality before any access.
-
No account in your store
They work only inside the Razviel console.
-
Screen-only access
Nothing stored, downloaded or copied in their country.
-
Access ends with the module
Every access is logged, and it closes when their scheduled shift ends.Every access logged, closed when their shift ends.
07FAQs
Questions buyers ask first.
What certifications does Razviel hold?
None today. Razviel does not hold a SOC 2 report or any third-party certification, and its Data Processing Addendum says so in writing.
What it publishes instead is on this page: the contracts, the commitments inside them, and how the system is built to keep them.
Can a customer talk the AI into a refund?
Not by design. The model can only propose. Authorization comes from deterministic code that re-reads your policy and takes no instructions from inside a conversation.
A request your policy does not allow is not negotiated into an exception: it is declined plainly, with the real alternatives.
Does Razviel train AI on my data?
No. Razviel does not train or fine-tune any model on merchant or customer data obtained through a commerce platform.
Your resolved cases improve your own operation, retrieved at the moment of answering and only inside your account. Nothing crosses to another brand.
Can Razviel staff read my customers’ conversations?
Reading a customer’s data would require a signed, verified and recorded deploy. There is no query, panel or key that gives us that access.
Razviel’s internal admin has no operation that returns your customers’ content.
Who processes my data, and where is the list?
The subprocessors are listed in the Data Processing Addendum, with what each one processes and where.
Any addition or replacement comes with at least 30 days’ notice and a right to object.