Security
Built to keep your conversations private
Recordings, screenshots and documents often contain sensitive information. Here is how we protect them, in plain language.
Google Cloud infrastructure
Ricord runs on Google Cloud. Application hosting, file storage and databases use Google's managed infrastructure, which is built with physical and network security controls we would not be able to match on our own.
Encryption in transit and at rest
All traffic between your device and Ricord uses TLS 1.2 or higher. Data stored in Ricord, including recordings, screenshots, documents and transcripts, is encrypted at rest with AES-256.
Firebase Authentication
Sign-in is handled by Firebase Authentication with Google or email. We never see or store your Google password, and every request to our API is verified against your signed-in identity.
Per-account isolation
Every Ricord belongs to one account. The API checks ownership on every request, so one account cannot read another account's recordings, documents, transcripts or action items.
Signed, time-limited file links
Your files are not stored at public addresses. When you play a recording or open a screenshot, Ricord issues a signed link that stops working after a short time.
AI processing without training
Transcription, OCR and analysis run through Google Cloud Vertex AI. Under our configuration, your content is processed to produce your results and is not used to train AI models, ours or anyone else's.
Deletion that cascades
Delete a Ricord and its audio, screenshots, documents, transcript, summaries and action items are removed with it. Delete your account and everything associated with it is removed too, subject to short-lived backups described in our Privacy Policy.
Your responsibilities
Security is shared. Keep your sign-in credentials private, use a strong password or Google sign-in with two-step verification, and only record people where you have the consent the law requires. Our Acceptable Use Policy explains what is not allowed.
Responsible disclosure
If you believe you have found a security vulnerability in Ricord, please email security@ricord.ai with the details and steps to reproduce. We will acknowledge your report, keep you updated, and fix valid issues as quickly as we can.
- Please give us reasonable time to fix an issue before you disclose it publicly.
- Please do not access, modify or delete other people’s data, and do not degrade the service.
- We will not pursue legal action against good-faith research that follows these guidelines.