Security & Privacy

Security without the complexity

Every customer runs on their own private instance with its own database — your data is never in a shared pool.

Privacy-first architecture

RequestHub keeps the records required for requests, approvals, due dates, assets, notifications, analytics, and audit history. Attachments are optional and controlled by your organization. Customer data is used to provide the service, not to train AI models.

How we protect your account

OAuth-only authentication

We never store or handle your password - you sign in through Google or Microsoft.

TLS 1.2+ encryption

All data encrypted in transit between your browser, our servers, and your connected tools.

Minimal data retention

We store the request records needed to operate your workflows. Attachments are optional and controlled by your organization.

No third-party data sales

Your information is used to run your service. Period.

What we don't do

  • We don't use customer data to train AI models
  • We don't access your systems beyond what's needed to route requests
  • We don't sell or share your data with advertisers
  • We don't require admin access to your entire Google or Microsoft tenant

Built on trusted infrastructure

RequestHub runs on modern cloud infrastructure with world-class physical security, redundancy, and uptime.

Questions about security?

We're happy to walk through our architecture with your team.

Get in touch