Beveiliging
Laatst bijgewerkt:
Security reviewers should be able to hold us to every line on this page. It describes the measures that exist today, and nothing more.
1. Onze aanpak
Every statement on this page describes a measure that is actually in place. We do not currently hold formal security certifications, and we do not claim any. What follows is what the product really does.
2. Inloggen en sessies
- Sign-in uses Google OAuth. Ruda never sees or stores your password.
- Sessions are issued by the application and expire automatically.
- You can review your active sessions and revoke any of them from Settings under Security.
3. Workspace-isolatie
Ruda is multi-tenant, and isolation is enforced in the database itself, not just in application code:
- The application connects to PostgreSQL as a restricted role, so row-level security policies are always enforced.
- Every workspace-scoped query runs inside a transaction bound to that workspace's ID. A query cannot read or write another workspace's rows.
- Public document links resolve through a single controlled entry point before entering the owning workspace's scope.
4. Versleuteling
- All traffic between your browser and Ruda is encrypted in transit with HTTPS.
- Our database (Neon PostgreSQL) and file storage (Cloudflare R2) providers encrypt stored data at rest as a standard property of their platforms.
5. Infrastructuur
Ruda runs on a small set of established providers: Vercel for hosting, Neon for PostgreSQL (Singapore region), Cloudflare R2 for file storage, and Resend for email delivery. We do not run our own servers.
6. Datapraktijken
- We collect only what the product needs; the Privacy Policy lists it in full.
- Workspace members can edit and delete their records inside the product.
- Emails sent by the product honor unsubscribe requests before any send.
7. Bindende taal en toepasselijk recht
The Korean version of this page is the authoritative text. Versions in other languages, including this English text, are translations provided for your convenience. If there is any difference in meaning between the Korean version and a translation, the Korean version prevails.
Governing law and jurisdiction follow the Terms of Service: the laws of the Republic of Korea, with the Seoul Central District Court as the exclusive court of first instance.
8. Een kwetsbaarheid melden
If you believe you have found a security issue in Ruda, email Rexplore Inc. at help@rexplore.xyz with the details. We read every report. Please give us a reasonable chance to fix an issue before disclosing it publicly. See also the Privacy Policy.
Revision history: September 24, 2026, operating company changed to Rexplore Inc. September 7, 2026, Korean text made authoritative and the governing law and jurisdiction clause added. September 6, 2026, first published.