Security at Recido

Recido will hold the records your business runs on — invoices, customers, sales, stock. That’s a responsibility we take seriously, and security is part of the product, not an afterthought.

How we protect your data

• Encryption in transit. All traffic between your phone and our servers uses TLS. This website is HTTPS-only.
• Encryption at rest. Business data is stored encrypted on infrastructure from established cloud providers.
• Least-privilege access. Production access is restricted to the few people who operate the service, protected by multi-factor authentication, and logged.
• Backups. Data is backed up automatically so a hardware failure never means losing your records.
• Minimal collection. We only collect what the product needs — see the privacy policy for exactly what that is.

Reporting a vulnerability

If you believe you’ve found a security issue in Recido or this website, please email support@recido.app with “Security” in the subject line. Include enough detail for us to reproduce the issue. We’ll acknowledge your report within two business days, keep you updated as we fix it, and never take legal action against good-faith research.

Questions

A formal security policy will be published alongside the app’s launch. Until then, questions about our practices are welcome at support@recido.app.