Security & Responsible Disclosure

01

Platform security

RaziCloud uses HTTPS, authenticated sessions, API tokens, request validation, role/module permissions and tenant-level data separation for workspace records.

02

Tenant isolation

Business data is scoped to the active tenant so customers, invoices, documents, payments and operational records are not shared between workspaces.

03

Operational logging

Material actions, API activity and system events can be logged to support auditability, troubleshooting and abuse investigation.

04

Responsible disclosure

If you believe you found a security issue, please avoid accessing, modifying or deleting data and report the details to support@razicloud.com.

05

Report details

Include affected URL, steps to reproduce, impact, screenshots or request IDs where possible. We will review valid reports and prioritize fixes based on severity.

06

Out of scope

Spam, social engineering, denial-of-service testing, physical attacks and attempts to access other customer data are not permitted.