Encryption at rest and in transit
All data encrypted with AES-256 at rest and TLS 1.3 in transit.
Trust Center
Trust and security
by design.
Enterprise-grade security for enterprise-grade compliance.
Book a walkthroughRole-based access control
Granular permissions ensure users only access what they need.
Continuous monitoring
24/7 monitoring of infrastructure and application security.
Audit logging
Complete, immutable audit logs for every action in the system.
Sweden-based Azure hosting
Regweaver's core platform data is hosted in Microsoft Azure Sweden data centres, with EU-based processing for approved service providers where applicable.
SSO support
SAML 2.0 and OpenID Connect for enterprise single sign-on.
Privacy.
Regweaver is fully compliant with GDPR. We process personal data only as necessary to provide the service, with appropriate legal bases and safeguards in place.
Our Data Processing Agreement (DPA) is publicly available.
Data handling.
Regweaver's core platform data is hosted in Microsoft Azure Sweden data centres. Customer data is logically isolated per tenant and processed in accordance with our agreements, DPA and applicable data protection requirements.
You retain ownership of your customer data. Export options are available in standard formats where supported by the service.
Infrastructure & Intellectual Property.
Regweaver is built on proprietary technology designed to support secure, traceable and auditable compliance operations across complex value chains.
The Swedish Intellectual Property Office (PRV) granted Regweaver Swedish patent SE 548659 on 23 September 2026. The patent covers key technical mechanisms used in the platform's execution architecture for structuring, distributing, validating and maintaining information across hierarchical multi-tier networks.
Our infrastructure is designed to strengthen data integrity, governance automation and operational trust for enterprise compliance environments.
Patent SE 548659 · Application 2530723-2
Security contact.
We welcome responsible disclosure of security vulnerabilities. If you identify a potential issue, please report it to our security team and we will acknowledge receipt within 3 business days.
We will not pursue legal action against researchers who act in good faith, avoid privacy violations and service disruption, and give us reasonable time to remediate before public disclosure.
