Trust Program Active

Our commitment to security and privacy

Last updated 10 hours ago

RealCISO empowers leaders with the insight needed to understand and improve their organization’s security posture, all while saving valuable time and reducing costs. Our data storage, development team and staff are fully US based and focused on providing you with a simple and secure experience.

Security & Access Controls:

- Production access is restricted to designated operations or DevOps roles.

- Configuration and secrets are managed via secure AWS services (e.g., AWS Secrets Manager, IAM roles).

Deployment Strategy:

- Use CI/CD pipelines to ensure secure and automated delivery to testing and production environments without manual developer intervention.

Compliance

NIST CSF 2.0
CIS Controls v8
SOC 2 Type I
CCPA / CPRA

Subprocessors

View all
Amazon Web Services Cloud Infrastructure
United States
Anthropic AI & Machine Learning
United States
MongoDB Atlas Database & Storage
United States
Stripe Payments & Billing
United States
What is the technology architecture for ReralCISO?

Web Application Architecture Overview

Framework: Meteor (JavaScript full-stack framework)

Backend: MongoDB

Infrastructure: Hosted on AWS, using container-based deployment (Docker with ECS)

How is environmental separation handled?

Environment Separation:

- Production and Testing environments are fully isolated.

- Developers have no access to production resources (zero-access policy).

- Testing environment is used for validation, QA, and pre-deployment checks.

Sub-Processors

NameCategoryLocation
Amazon Web Services Cloud Infrastructure United States
Cloud computing platform providing on-demand infrastructure, storage, compute, database, and managed services.
Anthropic AI & Machine Learning United States
AI safety company providing Claude large language models and API services for building reliable, interpretable, and steerable AI systems.
MongoDB Atlas Database & Storage United States
Fully managed cloud database service for MongoDB with automated scaling, backups, and global distribution.
Stripe Payments & Billing United States
Payment processing platform for online and in-person transactions, subscriptions, invoicing, and financial infrastructure.

Frequently Asked Questions

What is the technology architecture for ReralCISO?

Web Application Architecture Overview

Framework: Meteor (JavaScript full-stack framework)

Backend: MongoDB

Infrastructure: Hosted on AWS, using container-based deployment (Docker with ECS)

How is environmental separation handled?

Environment Separation:

- Production and Testing environments are fully isolated.

- Developers have no access to production resources (zero-access policy).

- Testing environment is used for validation, QA, and pre-deployment checks.