Security & trust

Your content is yours

• You own what you make. Everything you produce on Rhyora is yours, with commercial usage rights on paid plans.
• Not for training. We don't use your content to train AI models, and we never sell it.
• Used only to produce your work. Your briefs and inputs are used solely to generate the content you ask for.

Encryption

• In transit. All traffic between your browser and our servers is encrypted with TLS 1.2+; insecure requests are automatically redirected to HTTPS.
• At rest. Databases and stored media are encrypted at rest using AES-256. Sensitive credentials are protected with an additional layer of application-level encryption.

Access & authentication

• Per-user data isolation. Enforced access policies keep your work visible only to you and the people you invite.
• Role-based access. Invite teammates and decide who can view, edit, or approve, with least-privilege defaults.
• Account sign-in. Passwords are stored using strong, one-way hashing — never in plain text — and sessions use secure, hardened cookies.
• Administrative access. Privileged access requires multi-factor authentication, and every administrative action is recorded in an audit log.

Infrastructure & reliability

• Vetted cloud platforms. Rhyora runs on leading cloud platforms that independently maintain certifications such as SOC 2 Type II and ISO 27001.
• Network protection. Automatic DDoS protection and bot mitigation guard the platform against abuse.
• Isolated processing. Media is processed in isolated environments, with access-controlled storage for your generated assets.
• Backups. Managed databases are backed up automatically to support recovery.

Review & approvals

• Approve before anything ships. Work moves through review and sign-off; nothing goes live until it's approved.
• Share for review safely. Send work to clients and stakeholders with secure review links — no account required for reviewers.
• A full activity trail. Changes and approvals are recorded, so your team always knows what changed and who signed off.

Content safety

• Brand-safe by design. Generated content is screened to help keep it policy-compliant and appropriate for business use.
• Misuse is blocked. Uploads and outputs are checked to prevent harmful or policy-violating content.

Privacy, your choices

• You decide what's shared. Keep work private, or publish it when you're ready — the choice is yours.
• Your data, on request. Ask us for a copy of your data, or to delete it, at any time.
• Consent for uploads. Anything you upload is handled with your consent and only for the work you're creating.

For full detail on what we collect, how we handle it, our sub-processors, and your rights, see our Privacy Policy.

Payments

Payments are processed by a certified, PCI-DSS compliant payment provider. We never see or store your card details.

Responsible disclosure

If you discover a security issue, please report it to support@rhyora.com and give us reasonable time to investigate and resolve it before sharing it publicly. We take every report seriously.

Related

• Privacy Policy
• Terms of Service
• Acceptable Use
• Contact Us