No manager transcript access
Managers and leaders do not receive employee messages, transcripts, individual histories, or session-level signals.
Security, Privacy & Trust
Protect the conversation. Report the pattern.
RIDIER gives employees a private conversational experience and gives leaders only the aggregate intelligence they need. This page states what is in place today, and what we have not yet certified.
Core privacy principles
Clear separation between employee voice and leader visibility
Aggregate patterns only
Leader views are built from reportable organizational patterns rather than identifiable employee conversations.
Minimum reporting thresholds
Department, site, role-group, and initiative views require sufficient participation before any result is shown.
Controls in the product today
Privacy-conscious from entry to reporting
These are engineering controls implemented in the platform, not statements of certification.
Secure employee links
Production access uses high-entropy, organization-scoped links stored as hashes only, with closure, revocation, rate limiting, and optional PIN.
Tenant isolation
Every customer table enforces row-level security, and leader permissions are checked on the server for each request.
Purpose-limited conversation handling
Conversation content produces structured signals and is then redacted or deleted. Voice audio is not retained.
Differencing protection
Overlapping breakdowns are checked together, so a small group's results cannot be inferred by comparing views.
Server-side secrets
AI and service credentials stay on the server. They are never sent to the browser or embedded in the application.
Deterministic scoring
PSI™ and Adoption Readiness are calculated by versioned formulas in our own system. The language model never writes or weights a score.
Current status
Where we actually stand
We publish this honestly. RIDIER holds no compliance certification or third-party attestation at this time, and we will not claim otherwise. This table is updated as items change.
- Encryption in transit (TLS)In place
- Encryption at rest via managed hostingIn place
- Row-level security on customer dataIn place
- Role-based leader authorizationIn place
- Threshold and differencing suppressionIn place
- Published privacy policy, terms, subprocessor list, and processing informationIn place
- Written incident-response and data-retention proceduresIn progress
- Administrative audit logging for leader actionsIn progress
- Continuous compliance monitoring platformPlanned
- SOC 2 Type I / Type II examinationNot obtained
- ISO 27001 certificationNot obtained
- HIPAA arrangementOut of scope — RIDIER is not a healthcare or clinical product
Documentation
Policies and procurement documents
Everything a privacy or procurement review normally asks for is published, not gated.
Privacy Policy
What we collect, why, and how long we keep it.
Terms of Service
The terms governing platform access and use.
Data Processing Information
Roles, purposes, retention, and security measures.
Subprocessors
Every provider involved and what it processes.
Reporting a vulnerability
If you believe you have found a security issue in RIDIER, email Executive@ridier.com with the details and steps to reproduce. Please do not access or modify data belonging to others, and give us reasonable time to respond before publishing. We acknowledge reports and will keep you updated while we investigate. We do not currently operate a paid bounty program.
See RIDIER in action
Understand what your workforce is telling you.
See how employee conversations become clear, privacy-conscious intelligence for leaders.