Trust & Security

How Regovix protects your evidence and compliance data.

Last updated: September 2026

Honest status, not a compliance claim. Regovix as a company does not currently hold formal certifications like SOC 2 or ISO 27001 — several of our infrastructure subprocessors do, listed below. If a specific certification is a requirement for your organisation, contact us and we'll tell you plainly whether we currently meet it.

🔒

Encryption in transit

HTTPS enforced everywhere

🚫

No data selling

Never sold or shared with advertisers

📤

Data export

Export your records at any time

🤖

AI training

Anthropic doesn't train on API data by default

👤

Least-privilege access

Customer data access is need-to-know only

🌐

Independent apps

Each application has its own isolated database

1. Hosting & infrastructure

Regovix's global platform is a set of independently deployed applications, each with its own database — a genuine security boundary between apps, not just a role permission.

Component	Provider	Notes
Website & applications	Netlify, Inc.	Hosting and serverless functions
Application databases	Supabase (PostgreSQL)	One separate project per application
AI processing	Anthropic PBC	Powers EvidenceIQ's Contradiction Engine, BarrierWatch's ICAM analysis, and other AI-assisted features

2. Encryption & access controls

All data in transit is encrypted via HTTPS — there's no option to access Regovix unencrypted
Each application enforces row-level security so an organisation can only ever see its own data
Role-based access within each application — different users see only what their role permits
Passwords are hashed, never stored in plain text

3. AI data handling

Several Regovix applications use Claude AI (Anthropic) for specific features — EvidenceIQ's contradiction detection, BarrierWatch's ICAM classification and corrective-action guardrail check, and SDS extraction in ChemVault.

Anthropic does not train its models on API data by default under standard API terms. We recommend avoiding submitting sensitive personal information into AI-assisted fields where it isn't necessary for the task.

4. Subprocessors

Subprocessor	Purpose
Netlify, Inc.	Website and application hosting
Supabase	Application databases
Anthropic PBC	AI processing — input only, not retained for training
GitHub, Inc.	Source code repository — no customer data

5. Data export & portability

Your data belongs to you. Most Regovix applications include CSV export for tabular records. If you need a full export in a specific format, contact us directly and we'll arrange it.

6. Reporting a security issue

If you discover a security vulnerability, please report it responsibly to the email below with "Security Issue" in the subject line. We'll acknowledge within 1 business day.

7. Questions

For security questions, data processing agreements, or specific data residency requirements, contact us directly.

Regovix
Email: info@regovix.com.au