Encryption at rest and in transit
All data encrypted with AES-256 at rest and TLS 1.3 in transit.
Trust Center
Trust and security
by design.
Enterprise-grade security for enterprise-grade compliance.
Book a walkthroughRole-based access control
Granular permissions ensure users only access what they need.
Continuous monitoring
24/7 monitoring of infrastructure and application security.
Audit logging
Complete, immutable audit logs for every action in the system.
Sweden-based Azure hosting
Regweaver's core platform data is hosted in Microsoft Azure Sweden data centres, with EU-based processing for approved service providers where applicable.
SSO support
SAML 2.0 and OpenID Connect for enterprise single sign-on.
Privacy.
Regweaver is fully compliant with GDPR. We process personal data only as necessary to provide the service, with appropriate legal bases and safeguards in place.
Our Data Processing Agreement (DPA) is publicly available.
Data handling.
Regweaver's core platform data is hosted in Microsoft Azure Sweden data centres. Customer data is logically isolated per tenant and processed in accordance with our agreements, DPA and applicable data protection requirements.
You retain ownership of your customer data. Export options are available in standard formats where supported by the service.
Infrastructure & Intellectual Property.
Regweaver is built on proprietary technology designed to support secure, traceable, and auditable compliance operations across complex value chains.
PRV has granted Regweaver's patent, covering core aspects of our orchestration architecture for operational compliance across enterprise value chains. Official publication of the granted patent is expected within approximately 30 days, following payment of the publication fee.
Our infrastructure is designed to strengthen data integrity, governance automation, and operational trust for enterprise compliance environments.
Security contact.
We welcome responsible disclosure of security vulnerabilities. If you identify a potential issue, please report it to our security team and we will acknowledge receipt within 3 business days.
We will not pursue legal action against researchers who act in good faith, avoid privacy violations and service disruption, and give us reasonable time to remediate before public disclosure.
