Tenant isolation at the database
Every business’s data is isolated at the database level with row-level security. One business can never read or touch another’s data — it is enforced by the database itself, not just the app.
Security built into the foundation.
Randevos was designed security-first from day one. Your data and your bill are protected by isolation, encryption, and hard limits — not by hope.
Encrypted secrets vault
Channel tokens, API keys and other secrets are encrypted with AES-256-GCM envelope encryption. Each secret has its own key, wrapped by a master key — nothing sensitive is ever stored in plain text.
Hard AI & SMS spend caps
Every account has strict spending limits. A flood of fake or abusive messages can never run up your bill — when a cap is reached, the AI pauses or hands off instead of spending more.
Tamper-evident audit log
Security-relevant actions are recorded in an append-only, hash-chained audit log. If a record were ever altered, the chain would break and reveal it.
Least-privilege access
The application runs without database bypass privileges, roles are strictly separated, and administrative access is segregated and guarded behind an explicit runtime switch.
Account protection
Two-factor authentication, rate limiting, and protection against injection and prompt-abuse keep accounts and the AI safe from takeover and manipulation.
Privacy by design
We process data in line with KVKK and GDPR, never sell your data, and never use your business or customer data to train third-party AI models. See our Privacy Policy for the full picture.
Privacy Policy