Security & data
Where your data lives, who can see it, and what Rekorro never collects.
How data moves
From the phone to your report, and nowhere else.
Rep phonecaptures offline · sends over HTTPS
Your company onlyVisit recordsmanaged database, isolated per customerPhotosversioned storage, hosted in India
YouExcel export · evidence PDF · client portal
Other customers · separate rows, separate storage, never readable from your account
Where your data lives
- Hosted in India. Visit records sit in a managed database and photos in versioned storage, so an accidental delete can be undone.
- Every request travels over HTTPS. Photos are never public files: links in exports are signed, unguessable links that only work for that photo.
Who can see it
- Each company's data is isolated at the database level. One customer can never read another's rows.
- Roles are explicit. Admins configure, supervisors review their own teams, and client logins are read-only and limited to their program.
- Reps sign in with a one-time SMS code and staff with email and password. Every configuration change is written to an audit log.
What we never collect
- No background location. GPS is captured only at check-in, evidence capture and checkout.
- No gallery access, no contacts, no call logs. The camera opens only inside the app for evidence.
- No device fingerprinting beyond model, OS and app version, which we use to keep the fleet on a working build.
Your data, your call
- Export everything to Excel at any time: visits, photos and verdicts.
- When a program ends you can ask for deletion, and it is removed from live systems on request.
Have a security questionnaire? Send it over.
We reply in minutes, 9am to 9pm IST