Security
Your data stays your organisation's
Security isn't a feature you switch on. It's how every request is handled: isolated per organisation, checked against roles and rights, and encrypted in transit.
How it works
Separate workspaces, checked on every request
Every organisation on Repletory gets its own workspace. Who can see and do what is decided by roles and rights, and those are enforced by the platform on each request, not only hidden in the interface.
In place today
What protects your workspace
Isolated per organisation
Each organisation works in its own workspace, and its data is kept separate from every other organisation's.
Roles and rights on every request
People get roles, roles carry rights, and access is checked on every request, not just when the page loads.
Secrets encrypted at rest
Sensitive settings such as payment gateway and AI provider keys are stored encrypted.
Hosted on AWS
Repletory runs on Amazon Web Services.
HTTPS everywhere
Every connection to Repletory is encrypted in transit over HTTPS.
Two-factor sign-in
Add a second step to signing in to protect accounts.
AI and your data
You choose where AI runs
- AI models are processed in the EU by default.
- Models processed outside the EU are labelled, so it's your call.
- Use your own AI provider key if you prefer. It's stored encrypted.
Security questions?
If you have a question about how Repletory handles your data, or want to report a security concern, email us.
Bring your whole business into one workspace
Create your organisation on the free Core plan, invite your team, and switch on modules when you need them.

