We hold our platform to enterprise security standards and are transparent about the controls behind it.
Compliance & Certifications
ISO/IEC 27001:2022
Audited annually
ISO 9001:2015
Audited annually
ISO 22301:2019
Audited annually
TISAX
Scope ID A5G4X6-1 · re-assessed every 4 years
Certification body: INTERCERT
Data residency
Customer data in the EU (GCP Frankfurt europe-west3; backups europe-west1 Belgium)
Encryption
AES-256 at rest · TLS 1.3 in transit
Recovery
RTO 4h · RPO 24h
Documents
Sign in with your RIZM account to download. Documents not yet published are available on request.
ISO/IEC 27001:2022 certificate (PDF)
Sign in to download ISO 9001:2015 certificate (PDF)
Sign in to download ISO 22301:2019 certificate (PDF)
Sign in to download TISAX assessment label / result
Sign in to download Statement of Applicability (SoA) — under NDA
Sign in to download Latest penetration-test summary
Sign in to download Information Security Policy
Sign in to download Secure SDLC Policy
Sign in to download Incident Response Plan
Sign in to download Data Processing Agreement (DPA)
Sign in to download Data Privacy & Subprocessors
Google Cloud Platform
hosting, compute, storage and key management (Frankfurt europe-west3, backups Belgium europe-west1); Speech-to-Text for voice input (Netherlands europe-west4)
Google Vertex AI
optional LLM features of the RIZMO assistant (Google Cloud EU multi-region)
Google Workspace
business email, calendar and internal chat notifications (EU)
Gurobi
optimization solver (runs inside RIZM's GCP environment, no customer data leaves it)
Linear
support ticketing and issue tracking (EU-hosted workspace: issues, descriptions, comments, projects, documents and uploaded attachments are stored only in the EU)
Brevo
transactional email: invitations, role changes, optimization and support notifications (EU)
PostHog
product analytics, session and error tracking (EU cloud)
MapTiler
map tiles for site and asset maps (loaded by the browser)
Brave Search
web search for the optional RIZMO assistant (search queries only, no personal data)
Weather + spot-market data APIs
external market and weather data (no personal data)
Trusted by
Security questions?
Every control we operate is answered in the FAQ — data security, access control, AI governance, OT integration and more.