Trust Center
Security at Rowmesh
Teams run confidential, business-critical work on Rowmesh, so privacy and security are part of every feature we build. Earning and keeping your trust is our top priority.
ISO/IEC 27001:2022 certified
Independently audited by Insight Assurance, an accredited certification body, since April 2023.
Hosted in the EU
On Amazon Web Services in Ireland, in SOC 1, SOC 2 and ISO 27001 certified data centers.
Encrypted in transit and at rest
256-bit TLS between your device and our servers, and encryption for the data we store.
Single sign-on and 2FA
SAML single sign-on on the Enterprise plan, and two-factor authentication for your users.
Certification
ISO/IEC 27001 certification
ISO/IEC 27001:2022 is a specification for an information security management system (ISMS): a framework for an organization’s information risk management processes.
Rowmesh Limited’s certificate covers the information security management system that supports the Rowmesh app builder, across development, engineering, security and HR. It is valid until April 2029, with annual surveillance audits.
How we protect your data
Infrastructure
Rowmesh runs on Amazon Web Services in Ireland. Its data centers have round-the-clock security, automatic fire detection and suppression, fully redundant power and strict controls on physical access.
Encryption
The data we store for your Rowmesh apps, and everything sent between your device and our servers, is protected with 256-bit TLS encryption. It is also encrypted at rest.
Reliability and backups
Backups are replicated across multiple availability zones. Our business continuity and disaster recovery plans, including site operations playbooks, are regularly reviewed and rehearsed.
Application security
Automated application security scans and dependency security advisory scans run every day, alongside our internal scans.
Code review and testing
Every code and configuration change is reviewed, then tested in quality assurance before it is deployed, across every device, platform and browser Rowmesh supports.
Sign-in
Restrict any app to signed-in users with an email and password, add two-factor authentication, or use SAML single sign-on on the Enterprise plan.
Product security
Control who sees what
User roles and permissions are managed in each Rowmesh app. They control who can access which data, and whether they can change the records and fields you’ve shared with them.
- Permissions at the table, page, record and field level
- Record history shows who changed what, and when
Policies and resources
Privacy Policy
How Rowmesh collects, uses and protects personal data.
Terms of Service
The agreement for using the Rowmesh platform.
Cookie Policy
The cookies this site sets, and why.
Data Processing Agreement
Request a copy of our DPA for signature.
ISO/IEC 27001 certificate
Our certificate of registration from Insight Assurance.
Status page
Live uptime and incident history for the Rowmesh platform.
Need a security review for your team?
Talk to us about Enterprise, single sign-on and your data processing agreement.