At RedyRedes, we understand that outsourcing technological infrastructure requires a framework of trust built on verifiable commitments. Our operations are based on verifiable processes and robust security standards, not on unattainable claims or promises.
All network communication to our portals and APIs is necessarily carried out through secure protocols with TLS encryption. Sensitive information at rest in the databases is encrypted by our hosting providers to prevent physical leaks.
We delegate the authentication and login layer to Clerk, a leading security-certified provider, which facilitates mechanisms such as secure passwordless login, two-factor authentication (2FA), and robust session management, preventing the internal exposure of credentials.
Internally, we operate under the principle of least privilege. Technical and support profiles have restricted access only to the records essential for ticket resolution. Internal corporate client data maintains a strict logical separation (multitenancy).
Our technical architecture (PostgreSQL on Neon, Vercel Edge) includes automated backups managed by our hosting providers. We monitor service health continuously to detect and mitigate outages.
We log operational state changes —user additions and removals, organization and billing changes— with the actor, the timestamp and the previous and new values. That trail is what makes it possible to reconstruct what happened and who did it.
We are committed to maintaining the software, base libraries, and deployed infrastructure with the latest recommended security patches. We proactively address third-party vulnerability advisories in our operations framework.