Question 1

Where is my data stored?

Accepted Answer

Customer data is stored in managed cloud database and storage services. Region and residency depend on the underlying providers, and we will confirm the current hosting region in writing during evaluation rather than guessing here.

Question 2

How do you protect customer information?

Accepted Answer

Traffic is encrypted in transit with TLS, data sits in managed storage with provider-level encryption at rest, access is scoped by workspace role and enforced on the server, and credentials are scoped per environment and revocable.

Question 3

Do you sell or share customer data?

Accepted Answer

No. Customer conversation data is used to operate the service for that customer. Delivery necessarily involves messaging and telephony providers, which act on the customer's instruction to send a message or place a call.

Question 4

Can I delete my data?

Accepted Answer

Yes. Deletion of a workspace and its data can be requested through support. Self-serve export and configurable retention windows are planned but not available today.

Question 5

Do you train AI models on my conversations?

Accepted Answer

No. We do not use customer conversation content to train foundation models, and RapidRoot does not train foundation models of its own.

Question 6

Do you encrypt communications?

Accepted Answer

Yes. All dashboard and API traffic uses HTTPS with TLS 1.2 or higher. Message and call delivery legs run over third-party networks under those providers' transport security.

Question 7

How are passwords handled?

Accepted Answer

Passwords are salted and hashed by our managed authentication layer. They are never stored in plaintext and cannot be recovered or viewed by our team.

Question 8

Do you support multi-factor authentication?

Accepted Answer

Not today. MFA and SAML single sign-on are on our roadmap. We label them as planned everywhere on this site rather than implying they exist.

Question 9

Are you SOC 2 or ISO 27001 certified?

Accepted Answer

No. RapidRoot holds no security certifications today and has not completed an independent third-party audit. Our compliance roadmap sets out what we are working towards.

Question 10

How do I report a vulnerability?

Accepted Answer

Email security@rapidroot.in with reproduction steps and impact. We acknowledge reports, investigate, and keep you updated. We do not currently run a paid bug bounty programme.

Question 11

Do you publish an uptime SLA?

Accepted Answer

Not yet. We monitor availability and error rates internally, but we do not publish an uptime percentage because we do not yet operate a measured, externally verifiable commitment. Enterprise customers can discuss availability expectations with us directly.

Question 12

How will I hear about an incident?

Accepted Answer

Affected customers are contacted directly with what happened, what data was involved and what we are doing. Broader changes are recorded in the changelog and release notes.

Question 13

Do you take backups?

Accepted Answer

Yes — customer data sits in managed database services with automated backups and point-in-time recovery capability. Documented recovery runbooks are being formalised and scheduled restore testing is planned.

Question 14

How do we contact your team?

Accepted Answer

Use the contact form or email hello@rapidroot.in. For security-specific questions, security@rapidroot.in reaches the same team with the right context.

Question 15

Can we request custom onboarding?

Accepted Answer

Yes. Enterprise engagements begin with a guided pilot: we scope the use case, configure the workspace with you and review results before rollout.

Question 16

Is technical support available?

Accepted Answer

Yes, through email and scheduled calls during business hours in IST. We do not currently offer a 24/7 support commitment and will not claim one.

Question 17

Can we discuss enterprise requirements?

Accepted Answer

Yes. Data residency, SSO, audit logging, DPAs and retention controls are common requirements. Some are planned rather than available, and we will tell you which is which before you commit.

Question 18

Can you complete our security questionnaire?

Accepted Answer

We will complete a reasonable questionnaire and answer honestly, including marking controls as not implemented where that is the case.

Questions we are asked most

Data and privacy

Security practices

Reliability and operations

Enterprise and procurement