Built to handle your revenue data carefully.
RevPass touches your most sensitive systems — your CRM, your contracts, your bookings. Here's how we protect them, and exactly who else is in the loop.
Encrypted in transit and at rest
All traffic runs over TLS. Data is encrypted at rest by our infrastructure providers, and connected credentials (Salesforce, Slack) are additionally encrypted at the application layer with AES-256-GCM.
Invite-only access
Sign-in is through Clerk with Google, Microsoft or a one-time email code, on a verified email only. Only people your admin invites can use your workspace. Anyone else who signs in can only request access, and every new workspace is set up by RevPass by hand.
Scoped Salesforce access
RevPass connects through one OAuth connection per workspace, made by a dedicated integration user you create with a permission set covering only the objects RevPass reads and writes, and approved through our connected app first. Inside RevPass, searching Salesforce is limited to your admins and Order Management; reps see RevPass deals. Writes start off and run only when your admin turns them on; amount, stage (except an opt-in Closed Won), owner, close date and currency are never changed. Every write is audited. RevPass requests only the api, refresh_token and offline_access scopes.
Full audit trail
Key deal actions — validations, MSA checks, PO checks and booking — are logged with who, what, and when, so every change is attributable.
You decide what runs on its own
An autonomy dial lets you require human review on every email and action, or hand specific steps to the agent. Nothing is automated beyond the level you set.
Separated, isolated tenants
Each organization’s data is scoped to that organization. We never combine your data with another customer’s, and never reuse it commercially.
Your data trains your deals — not someone's model.
To check a signed order form or PO, RevPass sends the whole signed document to Anthropic's Claude to read it, along with the deal fields it is checked against. That runs under Anthropic's commercial terms, under which your data is not used to train AI models. The output is yours.
Because AI can make mistakes, a human stays in the loop by design. RevPass surfaces what it drafts and what it intends to change; you decide how much it does on its own, and every action it takes against your Salesforce is logged, with the field, new value and previous value for fixes from document checks, so your team can see what changed.
Who else touches your data
We keep our list of sub-processors transparent. Salesforce and Slack appear only when you choose to connect them.
Today
- TLS in transit; encryption at rest; AES-256-GCM for connected credentials
- Invite-only access: your admin invites each teammate
- Audit trail across deal actions
- Data Processing Addendum available at revpass.io/dpa
- You own your data — export or delete it on request
- We handle customer data as a service provider, in line with CCPA/CPRA
On our roadmap
- SOC 2 Type I on our roadmap
- Third-party penetration test
- Published security overview for vendor reviews
Mid-market evaluation under way? Reach out — we'll share our current security overview and where we are on each item.
Security questions?
We're happy to walk your security team through our architecture, controls, and roadmap.