Pilot · October 2, 2026

Workspace privacy and limits

The firm workspace is separate from the free browser-local tools. Signing in here does not transfer work from a free tool. Files are uploaded only when you choose an import or evidence upload and confirm it.

What the workspace stores

Clerk manages sign-in and verified email addresses. Neon stores firm membership, explicitly saved reviews, actions, approval snapshots and audit records. Private Vercel Blob storage holds supported evidence files. Vercel hosts the application. Development and production use separate databases and evidence stores.

The browser stores your appearance preference. Authentication uses Clerk session cookies. Free-tool content is never read from another tab.

Who can see your records

Active members see the records permitted by their firm role. Owners manage invitations and revocation; designated reviewers can approve work. Tabletop source files include facilitator material and require restricted-record access. Infrastructure administrators can administer the underlying services.

Pilot limits

The invitation-only pilot is for validation with fictional data until separately approved for real firm information. It supports up to 250 activities, 200 text evidence files and 50 MB of evidence per firm. Each evidence file must be UTF-8 text, CSV or JSON, no larger than 1 MB. Files are held for review before download. File checks are not a malware-scan certification.

Billing, automated email reminders, background recurrence, full program management and an operational service-level commitment are not active. Scheduling creates the next review record immediately. Invitations are links you choose to share. No breach notifications are sent by this product.

Your records

Use Records to export accessible workspace data and download evidence separately. Contact support@riacybercompliance.com for access, deletion or pilot support. Automated deletion and a contractual retention schedule are not yet available. Do not upload customer records, secrets or sensitive production information during validation.

Review remains a human decision

The workspace organizes facts and decisions; it does not certify compliance or replace legal or professional review. A reviewed activity can still contain unresolved corrective actions. Policy drafting and task completion do not prove that safeguards are implemented.