Trust centre
Our commitments, in writing.
What is true today is on this page. What is still in progress is named as in progress.
Certifications and audits.
| Item | Status on 11 November 2026 |
|---|---|
| ISO 27001 | Not certified. The programme is being built. No badge will appear here until a certificate exists. |
| SOC 2 | Not certified. We will link the report when there is a report. |
| CERT-In empanelled audit | Not completed. Stated here so the absence is not mistaken for an oversight. |
| Independent penetration test | A summary will be published when a test is complete. There is no summary yet. |
Data handling.
In the on-premise edition we do not host your messages, files or calls. They stay on infrastructure you operate. This website collects only what a form asks for, described in the privacy notice.
Software supply chain.
Releases are signed. A software bill of materials is available on request. The installer you run is the installer we signed, including when it is carried in on a network that never calls home.
Vulnerability disclosure.
Report what you find to security@ravenflo.io. The policy, the scope and the promise to good-faith researchers are public.
Legal documents.
The website has a privacy notice and terms of use. The product is licensed under the agreement you sign. Marketing pages do not outrank that agreement.