Security

Your data, scoped to you and only you.

RAZIO holds your pipeline, the most sensitive list your business owns. Here is how it is kept separate, controlled, and yours.

Tenancy

Strict per-organization scoping

RAZIO is multi-tenant with hard org boundaries. Every record is bound to your organization, and one org can never read or reach another's data.

Access control

Roles and permissions

Owner, Manager and Member roles gate deletes, team management, sequences and settings, so people see and change only what their role allows.

Accountability

Append-only audit log

Role changes, deletes, skips and intakes are recorded permanently. History is written once and never edited, so you can always see who did what.

AI

No training on your data

AI features run on Anthropic's Claude API, which does not train on your inputs. Each AI tool is a module you can leave switched off entirely.

Email

Sent from your own domain

Outbound email goes from your DNS-verified domain, not a shared address, so deliverability and replies stay with you.

Ownership

Import in, export out

Your organization owns its data. Bring it in by CSV or Excel, take it out whenever you want, and take it with you if you leave.

Hosting and infrastructure

RAZIO runs on managed cloud infrastructure (Vercel) with encryption in transit over HTTPS. The lead intake API is rate-limited and key-scoped per organization, so a website form can feed leads in without exposing anything else. Secrets and API keys are held server-side and never shipped to the browser.

Subprocessors

We keep the vendor list short, and each is bound to protect the data it processes:

Your responsibilities

Security is shared. Use strong, unique credentials, assign roles carefully, and make sure the data you load into RAZIO is data you have a lawful basis to process. Outbound email you send is your content, sent under your domain's reputation.

Reporting a vulnerability

Found a security issue? We want to hear it. Email support@tdwebllc.com with the details and steps to reproduce, and we will acknowledge and work it. Please give us reasonable time to fix before any public disclosure.