Skip to main content
Reguweb

Reguweb trust center

What your security review needs to know

How we keep customer data safe, where our compliance program stands today, and the documents vendor management asks for.

Reguweb at a glance

Where our program stands today

How we protect customer data

Security, compliance and privacy each have their own page with the full detail. Here is the short version.

Security

Encryption in transit and at rest, restricted access, continuous monitoring and layered defences.

  • TLS 1.2+ on every customer-facing endpoint
  • AES-256 encryption at rest
  • Production access is role-based, MFA-required and audit-logged
  • TOTP two-factor authentication on every account
  • Continuous monitoring with request-ID correlated logs
  • High-severity dependency CVEs patched within 7 days
Read the security overview

Compliance

GDPR-aligned processing. EAA, ADA and Section 508 reporting is live.

  • GDPR Live
  • EAA Live
  • ADA Live
  • Section 508 Live
See the compliance program

Privacy

You own your data. The privacy policy has the full detail.

Read the privacy policy
  • We never sell your data.

  • We never train AI models on it.

  • We delete it on request.

For procurement

The documents vendor management asks for. Read them here, or download the DPA as a PDF.

Need our latest evidence package? Email no-reply@reguweb.com.

Found a vulnerability?

We take responsible disclosure seriously. Email our security team with what you found and how to reproduce it.

to acknowledge your report
1 business day
priority for critical reports
Same day
for researchers who report material issues, with their consent
Public credit

We do not run a bug bounty program yet.

Running a vendor review?

Ask for our evidence pack. We share these documents under NDA.

  • Data Processing Agreement (DPA)
  • Sub-processors register
  • Latest penetration test summary
  • Security questionnaire (CAIQ / SIG Lite)
  • Business continuity and disaster recovery plan