Workspace isolation
Production data is scoped to the customer workspace and protected with database Row Level Security and role-based permissions.
Security & data practices
Built to recover revenue without taking unnecessary control of your accounts.
RevoCapture’s production architecture is designed around tenant isolation, least privilege, customer-owned communications providers, suppression controls, and auditable workflow state.
Customer-owned providers
Phone, SMS, and carrier accounts stay under the customer’s ownership wherever practical. RevoCapture does not need to routinely front telecom charges.
Compliance controls
Opt-outs and suppressions are designed to override active workflows. Unknown contactability is not treated as automatic permission to send.
Current safeguards in the build
- Multi-tenant database policies and role-based access
- Admin-only provider configuration
- Read-only historical access after billing stops
- Privacy-conscious audit events without message-body logging
- Workspace export and deletion paths
- Input validation and duplicate protection
- Signed Stripe and Telnyx webhook verification
- Webhook size limits and fail-closed mapping
- No server secrets in browser configuration
- Static secret scanning before release packaging
- Customer opt-out/suppression controls across modules
- Outbound Call Rescue automation disabled until explicitly tested
Claims we do not make
RevoCapture does not claim SOC 2, ISO 27001, HIPAA, PCI DSS service-provider certification, legal compliance certification, or any other certification that has not actually been obtained. Payment card data is intended to be handled by Stripe rather than stored by RevoCapture.
Security depends on correct deployment and account configuration. Live cross-tenant, browser, payment, and provider tests are required before production launch.
Data ownership and deletion
Customers retain control of their business data and external provider accounts. RevoCapture includes export and workspace-deletion paths so a customer is not intentionally trapped in the platform.