Security & deployment
Built to pass the meeting after the demo
Your controller, your CISO, and your audit partner in the same room. Everything here is enforced by construction, not by configuration.
Deployment
Cloud
Rever Cloud
Tenant isolated by construction. Your data never trains anyone else's books. SSO, SCIM, and region pinning.
Dedicated
Private VPC
Single tenant in a dedicated account, with in-region model routing. Any model swap is exam-gated on your own past cases.
Self-hosted
Rever Reserve
The full department inside your perimeter. Same floors, same trail, same replay. You hold the keys.
The answer sheet
What your auditor will ask
Can the AI post to my GL?
No, structurally. Only human-approved entries pass the single audited connection. Write permissions do not exist in agent runtimes, so a poisoned document has nothing to press.
How do I evidence a control?
The trail is append-only and hash-chained, and any decision replays from what was known at the time. Evidence packets export in your auditor's PBC format.
Who is liable for agent errors?
Preparer is never approver, on every entry. Delegation is earned on 500 certified cases, and one material error demotes the duty, publicly.
What happens if we leave?
Your rules, findings, documents, and trail export whole. We keep customers by being useful, not by holding data.
The six floors
Non-negotiable minimums. You can raise any of them. Nobody, including Rever, can lower them.
🔒 Dual approval
on anything over $25,000
🔒 Human callback
on every vendor bank-detail change
🔒 Approval required
on anything external: claims, rebills, notes
🔒 Preparer ≠approver
on every posted entry
🔒 Freezes lift human-only
no agent can unfreeze what Sentinel stopped
🔒 Outbound precision gate
external duties run only at 99% measured precision
SOC 2 Type II · ISO 27001 · SSO, SAML and SCIM · encryption in transit and at rest · residency in five regions · control documentation generated from the trail. Whitepaper under NDA.