Security

We sell a tool for answering security reviews. It would be embarrassing if we couldn't answer our own. Here is how Rampwire handles your data.

Isolation

Every account's documents, questionnaires, and answers live in storage scoped to that account. Retrieval is filtered per account at the database and vector-index level. One customer's content is never retrievable by another.

Encryption

All traffic is served over TLS. Data at rest is encrypted by our infrastructure provider (Cloudflare) using AES-256.

Access control

Accounts are protected by email + password (stored as PBKDF2 hashes with per-user salts, never in readable form) and HttpOnly, Secure, SameSite session cookies. Production access by the operator requires authentication, and you can delete any document or questionnaire yourself at any time.

AI processing

Answers are generated by Cloudflare Workers AI using retrieval over your own documents. Your content is not used to train models and is not shared with other customers.

Payments

Payments run through PayPal. Rampwire never sees or stores payment card details.

Data deletion

Deleting a document removes its text and its vector embeddings permanently. Deleting your account removes all associated data. Email support@rampwire.app if you want us to handle deletion for you.

Subprocessors

Cloudflare (application hosting, storage, AI inference) and PayPal (payments). Nothing else touches your content today.

Responsible disclosure

Found something? Email support@rampwire.app and we'll take it seriously.